80), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x256, 0x240483) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:08 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 15:29:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newrule={0x60, 0x20, 0xb00, 0x70bd25, 0x25dfdbfe, {0x2, 0x14, 0x10, 0x3, 0x3f, 0x0, 0x0, 0x4, 0x10}, [@FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0xb4}, @FRA_SRC={0x8, 0x2, @rand_addr=0x64010102}, @FRA_FLOW={0x8, 0xb, 0x20}, @FRA_FLOW={0x8, 0xb, 0x8}, @FRA_DST={0x8, 0x1, @multicast2}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xaf}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1e7d}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000004}, 0x200000c1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@bridge_delneigh={0x3c, 0x1d, 0x400, 0x70bd29, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x7}, [@NDA_PORT={0x6, 0x6, 0x4e21}, @NDA_FDB_EXT_ATTRS={0x8, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}]}, @NDA_MASTER={0x8, 0x9, 0xd618}, @NDA_PROTOCOL={0x5, 0xc, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) 15:29:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=@bridge_delvlan={0x80, 0x71, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0xe2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x1, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x4, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x5, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x9}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x30, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x7}}}]}, 0x80}}, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x80040, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000140)="98", 0x1}) 15:29:08 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 15:29:08 executing program 4: socket(0x0, 0x5, 0x1) 15:29:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newrule={0x60, 0x20, 0xb00, 0x70bd25, 0x25dfdbfe, {0x2, 0x14, 0x10, 0x3, 0x3f, 0x0, 0x0, 0x4, 0x10}, [@FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0xb4}, @FRA_SRC={0x8, 0x2, @rand_addr=0x64010102}, @FRA_FLOW={0x8, 0xb, 0x20}, @FRA_FLOW={0x8, 0xb, 0x8}, @FRA_DST={0x8, 0x1, @multicast2}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xaf}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1e7d}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000004}, 0x200000c1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) (async) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x256, 0x240483) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@bridge_delneigh={0x3c, 0x1d, 0x400, 0x70bd29, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x7}, [@NDA_PORT={0x6, 0x6, 0x4e21}, @NDA_FDB_EXT_ATTRS={0x8, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}]}, @NDA_MASTER={0x8, 0x9, 0xd618}, @NDA_PROTOCOL={0x5, 0xc, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 64) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) 15:29:08 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 15:29:08 executing program 1: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=@bridge_delvlan={0x80, 0x71, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0xe2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x1, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x4, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x5, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x9}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x30, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x7}}}]}, 0x80}}, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x80040, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000140)="98", 0x1}) 15:29:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newrule={0x60, 0x20, 0xb00, 0x70bd25, 0x25dfdbfe, {0x2, 0x14, 0x10, 0x3, 0x3f, 0x0, 0x0, 0x4, 0x10}, [@FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0xb4}, @FRA_SRC={0x8, 0x2, @rand_addr=0x64010102}, @FRA_FLOW={0x8, 0xb, 0x20}, @FRA_FLOW={0x8, 0xb, 0x8}, @FRA_DST={0x8, 0x1, @multicast2}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xaf}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1e7d}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000004}, 0x200000c1) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x6) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0xb, 0x0, @buffer={0x0, 0x0, &(0x7f00000001c0)=""/213}, &(0x7f0000000000)="a4f3af474eff85f70635aab45bcc292f3c451634", 0x0, 0x1, 0x4, 0x0, 0x0}) 15:29:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=@bridge_delvlan={0x80, 0x71, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0xe2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x1, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x4, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x5, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x9}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x30, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x7}}}]}, 0x80}}, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x80040, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000140)="98", 0x1}) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=@bridge_delvlan={0x80, 0x71, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0xe2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x1, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x4, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x5, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x9}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x30, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x7}}}]}, 0x80}}, 0x0) (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x80040, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000140)="98", 0x1}) (async) 15:29:09 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x0, 0x0, 0x6, 0x2, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:09 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_delroute={0x5c, 0x19, 0x20, 0x70bd28, 0x25dfdbfe, {0x2, 0x80, 0x80, 0x1, 0xfc, 0x2, 0xff, 0x3, 0x2200}, [@RTA_UID={0x8, 0x19, 0xffffffffffffffff}, @RTA_NH_ID={0x8, 0x1e, 0x9}, @RTA_OIF={0x8, 0x4, r1}, @RTA_SRC={0x8, 0x2, @multicast2}, @RTA_TABLE={0x8, 0xf, 0x909b}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_GATEWAY={0x8, 0x5, @multicast1}, @RTA_PRIORITY={0x8, 0x6, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c085) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000002380000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x6) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0xb, 0x0, @buffer={0x0, 0x0, &(0x7f00000001c0)=""/213}, &(0x7f0000000000)="a4f3af474eff85f70635aab45bcc292f3c451634", 0x0, 0x1, 0x4, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x6) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0xb, 0x0, @buffer={0x0, 0x0, &(0x7f00000001c0)=""/213}, &(0x7f0000000000)="a4f3af474eff85f70635aab45bcc292f3c451634", 0x0, 0x1, 0x4, 0x0, 0x0}) (async) 15:29:09 executing program 4: socket(0x2b, 0x0, 0x1) 15:29:09 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x0, 0x0, 0x6, 0x2, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:09 executing program 1: socket$nl_route(0x10, 0x3, 0x0) 15:29:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@bridge_delneigh={0x3c, 0x1d, 0x400, 0x70bd29, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x7}, [@NDA_PORT={0x6, 0x6, 0x4e21}, @NDA_FDB_EXT_ATTRS={0x8, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}]}, @NDA_MASTER={0x8, 0x9, 0xd618}, @NDA_PROTOCOL={0x5, 0xc, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) 15:29:09 executing program 4: socket(0x2b, 0x0, 0x0) 15:29:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x6) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0xb, 0x0, @buffer={0x0, 0x0, &(0x7f00000001c0)=""/213}, &(0x7f0000000000)="a4f3af474eff85f70635aab45bcc292f3c451634", 0x0, 0x1, 0x4, 0x0, 0x0}) 15:29:09 executing program 2: syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_delroute={0x5c, 0x19, 0x20, 0x70bd28, 0x25dfdbfe, {0x2, 0x80, 0x80, 0x1, 0xfc, 0x2, 0xff, 0x3, 0x2200}, [@RTA_UID={0x8, 0x19, 0xffffffffffffffff}, @RTA_NH_ID={0x8, 0x1e, 0x9}, @RTA_OIF={0x8, 0x4, r1}, @RTA_SRC={0x8, 0x2, @multicast2}, @RTA_TABLE={0x8, 0xf, 0x909b}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_GATEWAY={0x8, 0x5, @multicast1}, @RTA_PRIORITY={0x8, 0x6, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c085) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000002380000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:09 executing program 1: socket$nl_route(0x10, 0x3, 0x0) 15:29:09 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x0, 0x0, 0x6, 0x2, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:09 executing program 4: socket(0x2b, 0x0, 0x0) 15:29:09 executing program 1: socket$nl_route(0x10, 0x3, 0x0) 15:29:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x21}]}, 0x2c}}, 0x84) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:09 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:09 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_delroute={0x5c, 0x19, 0x20, 0x70bd28, 0x25dfdbfe, {0x2, 0x80, 0x80, 0x1, 0xfc, 0x2, 0xff, 0x3, 0x2200}, [@RTA_UID={0x8, 0x19, 0xffffffffffffffff}, @RTA_NH_ID={0x8, 0x1e, 0x9}, @RTA_OIF={0x8, 0x4, r1}, @RTA_SRC={0x8, 0x2, @multicast2}, @RTA_TABLE={0x8, 0xf, 0x909b}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_GATEWAY={0x8, 0x5, @multicast1}, @RTA_PRIORITY={0x8, 0x6, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c085) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000002380000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) fanotify_mark(r1, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e0002002cbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="818e424830194f178a8bb3560000"], 0x1c}, 0x1, 0x0, 0x0, 0x24010895}, 0x4008010) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x10180d) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000fe7000/0x3000)=nil) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x200) syz_open_dev$usbmon(&(0x7f0000000240), 0x7, 0x129180) 15:29:09 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:09 executing program 4: socket(0x2b, 0x0, 0x0) 15:29:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x21}]}, 0x2c}}, 0x84) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000000)) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x21}]}, 0x2c}}, 0x84) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 15:29:09 executing program 2: ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0xbf, 0x10000) mmap$snddsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0x104050, r0, 0xb000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) fanotify_mark(r1, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e0002002cbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="818e424830194f178a8bb3560000"], 0x1c}, 0x1, 0x0, 0x0, 0x24010895}, 0x4008010) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x10180d) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000fe7000/0x3000)=nil) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x200) syz_open_dev$usbmon(&(0x7f0000000240), 0x7, 0x129180) 15:29:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) r1 = syz_io_uring_setup(0x2e44, &(0x7f0000000080), &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x0, 0x4012, r1, 0x8000000) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_SHUTDOWN={0x22, 0x63, 0x0, r3}, 0xffff) 15:29:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x4000000, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:09 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:09 executing program 2: ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0xbf, 0x10000) mmap$snddsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0x104050, r0, 0xb000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) (async) syz_open_dev$sndpcmp(&(0x7f0000000000), 0xbf, 0x10000) (async) mmap$snddsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0x104050, r0, 0xb000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) (async) 15:29:09 executing program 3: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000000)) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x21}]}, 0x2c}}, 0x84) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) r1 = syz_io_uring_setup(0x2e44, &(0x7f0000000080), &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x0, 0x4012, r1, 0x8000000) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_SHUTDOWN={0x22, 0x63, 0x0, r3}, 0xffff) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) syz_io_uring_setup(0x2e44, &(0x7f0000000080), &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x0, 0x4012, r1, 0x8000000) (async) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_SHUTDOWN={0x22, 0x63, 0x0, r3}, 0xffff) (async) 15:29:09 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x2, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) fanotify_mark(r1, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e0002002cbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="818e424830194f178a8bb3560000"], 0x1c}, 0x1, 0x0, 0x0, 0x24010895}, 0x4008010) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x10180d) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000fe7000/0x3000)=nil) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x200) (async) syz_open_dev$usbmon(&(0x7f0000000240), 0x7, 0x129180) 15:29:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:09 executing program 2: ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) (async) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0xbf, 0x10000) mmap$snddsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0x104050, r0, 0xb000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x3}}, 0x18) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) syz_open_dev$sg(&(0x7f00000000c0), 0xd4f, 0x25a280) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x0, 0x70bd26}, 0x14}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001e00)={0xffffffffffffffff, 0xe0, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001b40)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000001b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001bc0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001c00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001c40), &(0x7f0000001c80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001cc0)}}, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000001f00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x68, r2, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x6}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000000}, 0x80) r4 = socket(0x1, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmsg$can_j1939(r5, &(0x7f0000001680)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/137, 0x89}, {&(0x7f0000001140)=""/40, 0x28}, {&(0x7f0000001180)=""/52, 0x34}, {&(0x7f00000011c0)=""/199, 0xc7}, {&(0x7f00000012c0)=""/75, 0x4b}, {&(0x7f0000001340)=""/114, 0x72}, {&(0x7f00000013c0)=""/229, 0xe5}, {&(0x7f00000014c0)=""/35, 0x23}, {&(0x7f0000001500)=""/85, 0x55}], 0xa, &(0x7f0000001640)=""/33, 0x21}, 0x40000100) bind$can_j1939(r4, 0x0, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000019c0)={r5, 0xe0, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001700)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000001740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000017c0)=[{}], 0x8, 0x10, &(0x7f0000001800), &(0x7f0000001840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001880)}}, 0x10) sendmsg$FOU_CMD_GET(r4, &(0x7f0000001ac0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x50, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x11}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x1) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000010, r5, 0x1000) 15:29:09 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x2, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000100), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="a82a0000143e0100000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x381280) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MSG_RING={0x28, 0xa, 0x0, r1, 0x6, &(0x7f0000000140)="3bd3b7eaa3ea7397961482a1e95a0148d940b2e9f01953ce408439625e6ace3b986911a828d94ec246007713c8dca21b0f80b88289b50d627f", 0x39, 0x0, 0x1}, 0x7ff) 15:29:09 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x0, 0x70bd26}, 0x14}}, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}, @FOU_ATTR_TYPE={0x5}]}, 0x24}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) 15:29:09 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x2, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000100), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="a82a0000143e0100000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x381280) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MSG_RING={0x28, 0xa, 0x0, r1, 0x6, &(0x7f0000000140)="3bd3b7eaa3ea7397961482a1e95a0148d940b2e9f01953ce408439625e6ace3b986911a828d94ec246007713c8dca21b0f80b88289b50d627f", 0x39, 0x0, 0x1}, 0x7ff) 15:29:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) r1 = syz_io_uring_setup(0x2e44, &(0x7f0000000080), &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x0, 0x4012, r1, 0x8000000) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_SHUTDOWN={0x22, 0x63, 0x0, r3}, 0xffff) 15:29:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x7b, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x3}}, 0x18) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) (async) syz_open_dev$sg(&(0x7f00000000c0), 0xd4f, 0x25a280) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:10 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x0, 0x70bd26}, 0x14}}, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}, @FOU_ATTR_TYPE={0x5}]}, 0x24}}, 0x40) (async) socket$nl_route(0x10, 0x3, 0x0) 15:29:10 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x2, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x7b, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000100), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="a82a0000143e0100000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x381280) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MSG_RING={0x28, 0xa, 0x0, r1, 0x6, &(0x7f0000000140)="3bd3b7eaa3ea7397961482a1e95a0148d940b2e9f01953ce408439625e6ace3b986911a828d94ec246007713c8dca21b0f80b88289b50d627f", 0x39, 0x0, 0x1}, 0x7ff) 15:29:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000940001ef000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x3}}, 0x18) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) syz_open_dev$sg(&(0x7f00000000c0), 0xd4f, 0x25a280) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x3}}, 0x18) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) (async) syz_open_dev$sg(&(0x7f00000000c0), 0xd4f, 0x25a280) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 15:29:10 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x0, 0x70bd26}, 0x14}}, 0x0) (async) sendmsg$FOU_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}, @FOU_ATTR_TYPE={0x5}]}, 0x24}}, 0x40) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) 15:29:10 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x2, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000140001000001000002000000", @ANYRES32=0x0], 0x18}}, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x1, 0x5, 0x8, @remote, @loopback, 0x8000, 0x700, 0x8001, 0x1c}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6_vti0\x00', r2, 0x29, 0x4, 0xf9, 0x80000000, 0x38, @mcast2, @mcast2, 0x7, 0x40, 0x1}}) 15:29:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x7b, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000940001ef000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000140001000001000002000000", @ANYRES32=0x0], 0x18}}, 0x0) (async) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x1, 0x5, 0x8, @remote, @loopback, 0x8000, 0x700, 0x8001, 0x1c}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6_vti0\x00', r2, 0x29, 0x4, 0xf9, 0x80000000, 0x38, @mcast2, @mcast2, 0x7, 0x40, 0x1}}) 15:29:10 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x2, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:10 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x7b, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:10 executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000940001ef000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x8, @scatter={0x1, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/160, 0xa0}]}, &(0x7f0000000000)="a4f33c451634", 0x0, 0x7, 0x0, 0x0, 0x0}) 15:29:10 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x7b, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="6578ed5b65eef0b7afbf666a7ad5caa85ff6f5b157bbc81e4572f4bf8c9a88487b48fc6f6f3e725bd3847775f708f849417421642573baaf1a74acc0dec83681c7f1ca62c2e00534abb204fa60099433155f502a3f4967f5d43bd2951709afb9eeb8d66f3435dc750cb24d2b10ff47b3febe7eddcfd673ea791ae89ab71cf03b3825e60a2905ee345f548f98a7a3341d6515ad75e662caff29a9119771941c3d7f4e225f15"], 0x7) pselect6(0x40, &(0x7f0000000040)={0x400, 0x0, 0x7f, 0x401, 0x9, 0x3, 0x8000000000000000, 0x1f}, &(0x7f0000000200)={0x7917, 0xa4, 0xc7063e5, 0x1f, 0xf0, 0x7fff, 0x5, 0x3}, &(0x7f0000000240)={0xc96, 0x1c0000, 0x3bd, 0x7, 0x2, 0x1, 0xffffffff, 0x9}, &(0x7f0000000280), &(0x7f0000000300)={&(0x7f00000002c0)={[0xff]}, 0x8}) statx(0xffffffffffffffff, &(0x7f0000000380)='./file0/file0\x00', 0x6000, 0x2, &(0x7f00000003c0)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 15:29:10 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x3, 0x2, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000140001000001000002000000", @ANYRES32=0x0], 0x18}}, 0x0) (async) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x1, 0x5, 0x8, @remote, @loopback, 0x8000, 0x700, 0x8001, 0x1c}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6_vti0\x00', r2, 0x29, 0x4, 0xf9, 0x80000000, 0x38, @mcast2, @mcast2, 0x7, 0x40, 0x1}}) 15:29:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000140001000000000000000000020000002c3c23adc629d819fe1ece29fcbf51f155cfa1cf6042eed709b4a758532efec904bba2ed192df3769474a5d9c70ebdc1d8a58d8b7bc6acd6561cb8f95153657dadd0977d858a38e67b657ca0ce00ac89c4984ecb69abdae787e32b", @ANYRES32=0x0], 0x18}}, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x7172730fd2c82d34, 0x70) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) socket(0x22, 0x6, 0x5) recvmsg$can_j1939(r1, &(0x7f0000000500)={&(0x7f0000000580)=@nl, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000400)=""/253, 0xfd}, 0x180) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ff1000/0x3000)=nil) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000100), 0x4) 15:29:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x8, @scatter={0x1, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/160, 0xa0}]}, &(0x7f0000000000)="a4f33c451634", 0x0, 0x7, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x8, @scatter={0x1, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/160, 0xa0}]}, &(0x7f0000000000)="a4f33c451634", 0x0, 0x7, 0x0, 0x0, 0x0}) (async) 15:29:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="6578ed5b65eef0b7afbf666a7ad5caa85ff6f5b157bbc81e4572f4bf8c9a88487b48fc6f6f3e725bd3847775f708f849417421642573baaf1a74acc0dec83681c7f1ca62c2e00534abb204fa60099433155f502a3f4967f5d43bd2951709afb9eeb8d66f3435dc750cb24d2b10ff47b3febe7eddcfd673ea791ae89ab71cf03b3825e60a2905ee345f548f98a7a3341d6515ad75e662caff29a9119771941c3d7f4e225f15"], 0x7) pselect6(0x40, &(0x7f0000000040)={0x400, 0x0, 0x7f, 0x401, 0x9, 0x3, 0x8000000000000000, 0x1f}, &(0x7f0000000200)={0x7917, 0xa4, 0xc7063e5, 0x1f, 0xf0, 0x7fff, 0x5, 0x3}, &(0x7f0000000240)={0xc96, 0x1c0000, 0x3bd, 0x7, 0x2, 0x1, 0xffffffff, 0x9}, &(0x7f0000000280), &(0x7f0000000300)={&(0x7f00000002c0)={[0xff]}, 0x8}) statx(0xffffffffffffffff, &(0x7f0000000380)='./file0/file0\x00', 0x6000, 0x2, &(0x7f00000003c0)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="6578ed5b65eef0b7afbf666a7ad5caa85ff6f5b157bbc81e4572f4bf8c9a88487b48fc6f6f3e725bd3847775f708f849417421642573baaf1a74acc0dec83681c7f1ca62c2e00534abb204fa60099433155f502a3f4967f5d43bd2951709afb9eeb8d66f3435dc750cb24d2b10ff47b3febe7eddcfd673ea791ae89ab71cf03b3825e60a2905ee345f548f98a7a3341d6515ad75e662caff29a9119771941c3d7f4e225f15"], 0x7) (async) pselect6(0x40, &(0x7f0000000040)={0x400, 0x0, 0x7f, 0x401, 0x9, 0x3, 0x8000000000000000, 0x1f}, &(0x7f0000000200)={0x7917, 0xa4, 0xc7063e5, 0x1f, 0xf0, 0x7fff, 0x5, 0x3}, &(0x7f0000000240)={0xc96, 0x1c0000, 0x3bd, 0x7, 0x2, 0x1, 0xffffffff, 0x9}, &(0x7f0000000280), &(0x7f0000000300)={&(0x7f00000002c0)={[0xff]}, 0x8}) (async) statx(0xffffffffffffffff, &(0x7f0000000380)='./file0/file0\x00', 0x6000, 0x2, &(0x7f00000003c0)) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async) 15:29:10 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x7b, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:10 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x3, 0x2, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000014000900000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x8, @scatter={0x1, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/160, 0xa0}]}, &(0x7f0000000000)="a4f33c451634", 0x0, 0x7, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x8, @scatter={0x1, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/160, 0xa0}]}, &(0x7f0000000000)="a4f33c451634", 0x0, 0x7, 0x0, 0x0, 0x0}) (async) 15:29:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000140001000000000000000000020000002c3c23adc629d819fe1ece29fcbf51f155cfa1cf6042eed709b4a758532efec904bba2ed192df3769474a5d9c70ebdc1d8a58d8b7bc6acd6561cb8f95153657dadd0977d858a38e67b657ca0ce00ac89c4984ecb69abdae787e32b", @ANYRES32=0x0], 0x18}}, 0x0) (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x7172730fd2c82d34, 0x70) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) socket(0x22, 0x6, 0x5) (async) recvmsg$can_j1939(r1, &(0x7f0000000500)={&(0x7f0000000580)=@nl, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000400)=""/253, 0xfd}, 0x180) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ff1000/0x3000)=nil) (async) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000100), 0x4) 15:29:10 executing program 4: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x7b, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="6578ed5b65eef0b7afbf666a7ad5caa85ff6f5b157bbc81e4572f4bf8c9a88487b48fc6f6f3e725bd3847775f708f849417421642573baaf1a74acc0dec83681c7f1ca62c2e00534abb204fa60099433155f502a3f4967f5d43bd2951709afb9eeb8d66f3435dc750cb24d2b10ff47b3febe7eddcfd673ea791ae89ab71cf03b3825e60a2905ee345f548f98a7a3341d6515ad75e662caff29a9119771941c3d7f4e225f15"], 0x7) (async) pselect6(0x40, &(0x7f0000000040)={0x400, 0x0, 0x7f, 0x401, 0x9, 0x3, 0x8000000000000000, 0x1f}, &(0x7f0000000200)={0x7917, 0xa4, 0xc7063e5, 0x1f, 0xf0, 0x7fff, 0x5, 0x3}, &(0x7f0000000240)={0xc96, 0x1c0000, 0x3bd, 0x7, 0x2, 0x1, 0xffffffff, 0x9}, &(0x7f0000000280), &(0x7f0000000300)={&(0x7f00000002c0)={[0xff]}, 0x8}) statx(0xffffffffffffffff, &(0x7f0000000380)='./file0/file0\x00', 0x6000, 0x2, &(0x7f00000003c0)) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 15:29:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000014000900000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:10 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x3, 0x2, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0xdffffffffffffff9, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002c40), 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x401, 0x90400) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000100)) r3 = syz_open_dev$vcsn(&(0x7f0000000180), 0x8000000000000001, 0x105282) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001800)={0x53, 0x4, 0x54, 0xd9, @scatter={0x7, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/50, 0x32}, {&(0x7f0000000200)=""/206, 0xce}, {&(0x7f0000000300)=""/209, 0xd1}, {&(0x7f0000000400)=""/200, 0xc8}, {&(0x7f0000000500)=""/28, 0x1c}, {&(0x7f0000000540)=""/222, 0xde}, {&(0x7f0000000640)=""/4096, 0x1000}]}, &(0x7f00000016c0)="8599d22fb9185877fe7fd5929d9495aee188e5202264ac96bc3d924c1e9afa672abe5ee082991b52f842ed54ec78d49f151e8d1b744263e7eee5d59cb11ab921dadf8d14d85d98ca4b349f05edc7e0eed8421f3a", &(0x7f0000001740)=""/65, 0x40, 0x2, 0x0, &(0x7f00000017c0)}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x0, 0xfffffffffffffffd, 0x0, 0x40, @buffer={0x0, 0xcc, &(0x7f0000001cc0)=""/204}, &(0x7f0000001880), 0x0, 0x4b42, 0x10020, 0x1, 0x0}) 15:29:10 executing program 4: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x7b, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000140001000000000000000000020000002c3c23adc629d819fe1ece29fcbf51f155cfa1cf6042eed709b4a758532efec904bba2ed192df3769474a5d9c70ebdc1d8a58d8b7bc6acd6561cb8f95153657dadd0977d858a38e67b657ca0ce00ac89c4984ecb69abdae787e32b", @ANYRES32=0x0], 0x18}}, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x7172730fd2c82d34, 0x70) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) socket(0x22, 0x6, 0x5) (async) recvmsg$can_j1939(r1, &(0x7f0000000500)={&(0x7f0000000580)=@nl, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000400)=""/253, 0xfd}, 0x180) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async, rerun: 64) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ff1000/0x3000)=nil) (async, rerun: 64) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000100), 0x4) 15:29:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000014000900000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000014000900000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) (async) 15:29:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000c14000100000000000000000002380000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0xdffffffffffffff9, 0x0) (async) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) (async, rerun: 64) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002c40), 0x0) (rerun: 64) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x401, 0x90400) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000100)) (async, rerun: 32) r3 = syz_open_dev$vcsn(&(0x7f0000000180), 0x8000000000000001, 0x105282) (rerun: 32) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001800)={0x53, 0x4, 0x54, 0xd9, @scatter={0x7, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/50, 0x32}, {&(0x7f0000000200)=""/206, 0xce}, {&(0x7f0000000300)=""/209, 0xd1}, {&(0x7f0000000400)=""/200, 0xc8}, {&(0x7f0000000500)=""/28, 0x1c}, {&(0x7f0000000540)=""/222, 0xde}, {&(0x7f0000000640)=""/4096, 0x1000}]}, &(0x7f00000016c0)="8599d22fb9185877fe7fd5929d9495aee188e5202264ac96bc3d924c1e9afa672abe5ee082991b52f842ed54ec78d49f151e8d1b744263e7eee5d59cb11ab921dadf8d14d85d98ca4b349f05edc7e0eed8421f3a", &(0x7f0000001740)=""/65, 0x40, 0x2, 0x0, &(0x7f00000017c0)}) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x0, 0xfffffffffffffffd, 0x0, 0x40, @buffer={0x0, 0xcc, &(0x7f0000001cc0)=""/204}, &(0x7f0000001880), 0x0, 0x4b42, 0x10020, 0x1, 0x0}) 15:29:10 executing program 4: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x7b, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:10 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x5, 0x2, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c4516", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:10 executing program 1: r0 = getpgrp(0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0d05605, &(0x7f0000000180)={0x3, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6855ee4a"}}) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000005a00010025bd7000fedbdf250008000200", @ANYRES32=r0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="010001723621ffa8c9860c00d6515d97f2e4e617abf5c4beefd4e108c08de31c8322cd0dcdc32107c15a42e3ed89b85bdabe8c951b53a42b94448eeea3492d3a2e880375b2ba927c2d6bc39dd5515100ebd7fee5fb8da8f1cedcc9d3fa4a37ca32d4ffcb5c0acd98a901b16d6a6a1c9af7d23680020d49047494baebd369d2500269063aaa386c24c3775f32a3aa1c2ee0e04dbf", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="0800010000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x4040010) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) 15:29:10 executing program 2: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000c14000100000000000000000002380000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:10 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x5, 0x2, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c4516", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipmr_newroute={0x104, 0x18, 0x100, 0x70bd2d, 0x25dfdbfe, {0x80, 0x20, 0x20, 0xd, 0xfd, 0x4, 0xfe, 0xa, 0x2800}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_MARK={0x8, 0x10, 0x1ff}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}, @RTA_NH_ID={0x8, 0x1e, 0x5}, @RTA_METRICS={0xb8, 0x8, 0x0, 0x1, "0f538cc818af2c1ed12db720b971854342bd4370087b73199aab112d032b7e58d9bce92e249e500abceb8d1c92b0d547c0d9c72b36268c4cb33564d3af0555288bb5db6f64f9fd40407177a999b6a48e16ca10636006f4a2d60f70ea12f6bd6ac1ccebfaa90a6752adaa00aff6a0d2860e20cd99ebb7809831466ed1f804f0f3b0bfb743fbb9e36d777ff6429e8a3bb5f8e5b0649e5f49a3c08a5916b151d18d833e115579f5f20517163dc088bd85064e72af55"}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010102}, @RTA_OIF={0x8}]}, 0x104}}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc000, 0x103) 15:29:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 15:29:10 executing program 1: r0 = getpgrp(0x0) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0d05605, &(0x7f0000000180)={0x3, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6855ee4a"}}) (async, rerun: 32) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000005a00010025bd7000fedbdf250008000200", @ANYRES32=r0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="010001723621ffa8c9860c00d6515d97f2e4e617abf5c4beefd4e108c08de31c8322cd0dcdc32107c15a42e3ed89b85bdabe8c951b53a42b94448eeea3492d3a2e880375b2ba927c2d6bc39dd5515100ebd7fee5fb8da8f1cedcc9d3fa4a37ca32d4ffcb5c0acd98a901b16d6a6a1c9af7d23680020d49047494baebd369d2500269063aaa386c24c3775f32a3aa1c2ee0e04dbf", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="0800010000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x4040010) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) 15:29:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipmr_newroute={0x104, 0x18, 0x100, 0x70bd2d, 0x25dfdbfe, {0x80, 0x20, 0x20, 0xd, 0xfd, 0x4, 0xfe, 0xa, 0x2800}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_MARK={0x8, 0x10, 0x1ff}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}, @RTA_NH_ID={0x8, 0x1e, 0x5}, @RTA_METRICS={0xb8, 0x8, 0x0, 0x1, "0f538cc818af2c1ed12db720b971854342bd4370087b73199aab112d032b7e58d9bce92e249e500abceb8d1c92b0d547c0d9c72b36268c4cb33564d3af0555288bb5db6f64f9fd40407177a999b6a48e16ca10636006f4a2d60f70ea12f6bd6ac1ccebfaa90a6752adaa00aff6a0d2860e20cd99ebb7809831466ed1f804f0f3b0bfb743fbb9e36d777ff6429e8a3bb5f8e5b0649e5f49a3c08a5916b151d18d833e115579f5f20517163dc088bd85064e72af55"}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010102}, @RTA_OIF={0x8}]}, 0x104}}, 0x0) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc000, 0x103) 15:29:10 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x5, 0x2, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c4516", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000c14000100000000000000000002380000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0xdffffffffffffff9, 0x0) (async) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002c40), 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x401, 0x90400) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000100)) (async) r3 = syz_open_dev$vcsn(&(0x7f0000000180), 0x8000000000000001, 0x105282) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001800)={0x53, 0x4, 0x54, 0xd9, @scatter={0x7, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/50, 0x32}, {&(0x7f0000000200)=""/206, 0xce}, {&(0x7f0000000300)=""/209, 0xd1}, {&(0x7f0000000400)=""/200, 0xc8}, {&(0x7f0000000500)=""/28, 0x1c}, {&(0x7f0000000540)=""/222, 0xde}, {&(0x7f0000000640)=""/4096, 0x1000}]}, &(0x7f00000016c0)="8599d22fb9185877fe7fd5929d9495aee188e5202264ac96bc3d924c1e9afa672abe5ee082991b52f842ed54ec78d49f151e8d1b744263e7eee5d59cb11ab921dadf8d14d85d98ca4b349f05edc7e0eed8421f3a", &(0x7f0000001740)=""/65, 0x40, 0x2, 0x0, &(0x7f00000017c0)}) (async, rerun: 32) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x0, 0xfffffffffffffffd, 0x0, 0x40, @buffer={0x0, 0xcc, &(0x7f0000001cc0)=""/204}, &(0x7f0000001880), 0x0, 0x4b42, 0x10020, 0x1, 0x0}) (rerun: 32) 15:29:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 15:29:10 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:11 executing program 5: r0 = socket(0x3, 0x1, 0x8000006) bind$can_j1939(r0, 0x0, 0x1000000) 15:29:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipmr_newroute={0x104, 0x18, 0x100, 0x70bd2d, 0x25dfdbfe, {0x80, 0x20, 0x20, 0xd, 0xfd, 0x4, 0xfe, 0xa, 0x2800}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_MARK={0x8, 0x10, 0x1ff}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}, @RTA_NH_ID={0x8, 0x1e, 0x5}, @RTA_METRICS={0xb8, 0x8, 0x0, 0x1, "0f538cc818af2c1ed12db720b971854342bd4370087b73199aab112d032b7e58d9bce92e249e500abceb8d1c92b0d547c0d9c72b36268c4cb33564d3af0555288bb5db6f64f9fd40407177a999b6a48e16ca10636006f4a2d60f70ea12f6bd6ac1ccebfaa90a6752adaa00aff6a0d2860e20cd99ebb7809831466ed1f804f0f3b0bfb743fbb9e36d777ff6429e8a3bb5f8e5b0649e5f49a3c08a5916b151d18d833e115579f5f20517163dc088bd85064e72af55"}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010102}, @RTA_OIF={0x8}]}, 0x104}}, 0x0) (async, rerun: 64) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc000, 0x103) 15:29:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 15:29:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) mmap$snddsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000006, 0x13, r1, 0x1000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:11 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x401c5820, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:11 executing program 1: r0 = getpgrp(0x0) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0d05605, &(0x7f0000000180)={0x3, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6855ee4a"}}) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000005a00010025bd7000fedbdf250008000200", @ANYRES32=r0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="010001723621ffa8c9860c00d6515d97f2e4e617abf5c4beefd4e108c08de31c8322cd0dcdc32107c15a42e3ed89b85bdabe8c951b53a42b94448eeea3492d3a2e880375b2ba927c2d6bc39dd5515100ebd7fee5fb8da8f1cedcc9d3fa4a37ca32d4ffcb5c0acd98a901b16d6a6a1c9af7d23680020d49047494baebd369d2500269063aaa386c24c3775f32a3aa1c2ee0e04dbf", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="0800010000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x4040010) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) 15:29:11 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) (async) 15:29:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 15:29:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000014000100040000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 15:29:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) mmap$snddsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000006, 0x13, r1, 0x1000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) (async) mmap$snddsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000006, 0x13, r1, 0x1000) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 15:29:11 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x401c5820, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000014000100040000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000014000100040000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 15:29:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 15:29:11 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x401c5820, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) mmap$snddsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000006, 0x13, r1, 0x1000) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:11 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 15:29:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000200), 0x4) recvmsg$can_j1939(r2, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getlink={0x28, 0x12, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x500, 0x40210}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x430}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000014000100040000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000014000100040000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) (async) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) 15:29:11 executing program 5: ioctl$SG_IO(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xfe, 0x200000) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) 15:29:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1800df49c82f5ed81907140001000000000000cc48ffa4e2a797b89ef16c9f00", @ANYRES32=0x0], 0x18}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x8010, r1, 0x8000000) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$incfs(r3, &(0x7f0000000040)='.log\x00', 0x10805, 0x0) mmap$snddsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000002, 0x10, r2, 0x5000) 15:29:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 15:29:11 executing program 5: ioctl$SG_IO(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:11 executing program 0: r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x9, 0x200000) ioctl$I2C_TIMEOUT(r0, 0x702, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xfe, 0x200000) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) 15:29:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 15:29:11 executing program 2: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1800df49c82f5ed81907140001000000000000cc48ffa4e2a797b89ef16c9f00", @ANYRES32=0x0], 0x18}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x8010, r1, 0x8000000) pipe2$watch_queue(&(0x7f0000000100), 0x80) (async) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$incfs(r3, &(0x7f0000000040)='.log\x00', 0x10805, 0x0) mmap$snddsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000002, 0x10, r2, 0x5000) 15:29:11 executing program 5: ioctl$SG_IO(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000200), 0x4) recvmsg$can_j1939(r2, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getlink={0x28, 0x12, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x500, 0x40210}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x430}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:12 executing program 0: r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x9, 0x200000) ioctl$I2C_TIMEOUT(r0, 0x702, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x9, 0x200000) (async) ioctl$I2C_TIMEOUT(r0, 0x702, 0x9) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) 15:29:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 15:29:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xfe, 0x200000) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) (async) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) 15:29:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1800df49c82f5ed81907140001000000000000cc48ffa4e2a797b89ef16c9f00", @ANYRES32=0x0], 0x18}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x8010, r1, 0x8000000) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) openat$incfs(r3, &(0x7f0000000040)='.log\x00', 0x10805, 0x0) (async) mmap$snddsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000002, 0x10, r2, 0x5000) 15:29:12 executing program 5: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x401c5820, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:12 executing program 3: ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x7, 0x0, &(0x7f0000001440)=[{&(0x7f00000014c0)=""/33, 0x21}, {&(0x7f00000000c0)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000100)=""/124, 0x7c}, {&(0x7f00000001c0)=""/40, 0x28}, {&(0x7f0000001340)=""/229, 0xe5}, {&(0x7f0000000200)=""/140, 0x8c}]}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x1, 0x0, 0x0, 0x0}) 15:29:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x7b, 0x0, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:12 executing program 5: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x401c5820, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x699, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x2e}, @val={0x8}, @val={0xc, 0x99, {0x3ff, 0x14}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}, [@IFA_RT_PRIORITY={0x8}, @IFA_BROADCAST={0x8, 0x4, @multicast1}]}, 0x28}}, 0x0) 15:29:12 executing program 0: r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x9, 0x200000) ioctl$I2C_TIMEOUT(r0, 0x702, 0x9) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x7b, 0x0, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r2 = socket(0x1e, 0x2, 0x0) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000200), 0x4) recvmsg$can_j1939(r2, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getlink={0x28, 0x12, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x500, 0x40210}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x430}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:13 executing program 5: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x401c5820, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:13 executing program 3: ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x7, 0x0, &(0x7f0000001440)=[{&(0x7f00000014c0)=""/33, 0x21}, {&(0x7f00000000c0)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000100)=""/124, 0x7c}, {&(0x7f00000001c0)=""/40, 0x28}, {&(0x7f0000001340)=""/229, 0xe5}, {&(0x7f0000000200)=""/140, 0x8c}]}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x1, 0x0, 0x0, 0x0}) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) (async) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) (async) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x7, 0x0, &(0x7f0000001440)=[{&(0x7f00000014c0)=""/33, 0x21}, {&(0x7f00000000c0)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000100)=""/124, 0x7c}, {&(0x7f00000001c0)=""/40, 0x28}, {&(0x7f0000001340)=""/229, 0xe5}, {&(0x7f0000000200)=""/140, 0x8c}]}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x1, 0x0, 0x0, 0x0}) (async) 15:29:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x699, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x2e}, @val={0x8}, @val={0xc, 0x99, {0x3ff, 0x14}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}, [@IFA_RT_PRIORITY={0x8}, @IFA_BROADCAST={0x8, 0x4, @multicast1}]}, 0x28}}, 0x0) 15:29:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newaddr={0x60, 0x14, 0x214, 0x70bd23, 0x25dfdbff, {0xa, 0x0, 0x1, 0xfe}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7fffffff}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_LOCAL={0x14, 0x2, @mcast2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008045}, 0x0) 15:29:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x7b, 0x0, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newaddr={0x60, 0x14, 0x214, 0x70bd23, 0x25dfdbff, {0xa, 0x0, 0x1, 0xfe}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7fffffff}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_LOCAL={0x14, 0x2, @mcast2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008045}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newaddr={0x60, 0x14, 0x214, 0x70bd23, 0x25dfdbff, {0xa, 0x0, 0x1, 0xfe}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7fffffff}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_LOCAL={0x14, 0x2, @mcast2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008045}, 0x0) (async) 15:29:13 executing program 5: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:13 executing program 3: ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x7, 0x0, &(0x7f0000001440)=[{&(0x7f00000014c0)=""/33, 0x21}, {&(0x7f00000000c0)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000100)=""/124, 0x7c}, {&(0x7f00000001c0)=""/40, 0x28}, {&(0x7f0000001340)=""/229, 0xe5}, {&(0x7f0000000200)=""/140, 0x8c}]}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x1, 0x0, 0x0, 0x0}) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) (async) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) (async) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x7, 0x0, &(0x7f0000001440)=[{&(0x7f00000014c0)=""/33, 0x21}, {&(0x7f00000000c0)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000100)=""/124, 0x7c}, {&(0x7f00000001c0)=""/40, 0x28}, {&(0x7f0000001340)=""/229, 0xe5}, {&(0x7f0000000200)=""/140, 0x8c}]}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x1, 0x0, 0x0, 0x0}) (async) 15:29:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x699, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x2e}, @val={0x8}, @val={0xc, 0x99, {0x3ff, 0x14}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}, [@IFA_RT_PRIORITY={0x8}, @IFA_BROADCAST={0x8, 0x4, @multicast1}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) pipe2$watch_queue(&(0x7f0000000100), 0x80) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x699, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x2e}, @val={0x8}, @val={0xc, 0x99, {0x3ff, 0x14}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}, [@IFA_RT_PRIORITY={0x8}, @IFA_BROADCAST={0x8, 0x4, @multicast1}]}, 0x28}}, 0x0) (async) 15:29:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x7b, 0x1}, 0x18}}, 0x0) 15:29:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newaddr={0x60, 0x14, 0x214, 0x70bd23, 0x25dfdbff, {0xa, 0x0, 0x1, 0xfe}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7fffffff}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_LOCAL={0x14, 0x2, @mcast2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008045}, 0x0) 15:29:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) 15:29:14 executing program 5: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000200), 0x4) recvmsg$can_j1939(r2, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getlink={0x28, 0x12, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x500, 0x40210}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x430}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000000)={0x0, 0x8000, 0x94d, 0x7, 0x3e000000, 0x6, 0x5, 0x1, 0x2, 0x2, 0x3, 0x3ff}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) 15:29:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000140001d72a0000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xffffffffffffffff, 0x7e, 0xff, @buffer={0x0, 0x5d, &(0x7f0000000100)=""/93}, &(0x7f0000000180)="ce2c0e80e45a9e3b3a3378fa53b3d17259aa0cee495d906f2824a24c4b5d9cae7fce0d4598daac5c6db2ad727f1438874e0f50d9e464af1668ac5a6bc28075ab2ca86b98616faaec95ca509f5d099ca8b51cba99c7c2355063fb56c0d3634f944c456476f8e2220717c25929f3c887e6e04246db2fd208f1042b8f23da4c", &(0x7f0000000200)=""/197, 0x5, 0x10, 0x1}) 15:29:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000140001d72a0000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xffffffffffffffff, 0x7e, 0xff, @buffer={0x0, 0x5d, &(0x7f0000000100)=""/93}, &(0x7f0000000180)="ce2c0e80e45a9e3b3a3378fa53b3d17259aa0cee495d906f2824a24c4b5d9cae7fce0d4598daac5c6db2ad727f1438874e0f50d9e464af1668ac5a6bc28075ab2ca86b98616faaec95ca509f5d099ca8b51cba99c7c2355063fb56c0d3634f944c456476f8e2220717c25929f3c887e6e04246db2fd208f1042b8f23da4c", &(0x7f0000000200)=""/197, 0x5, 0x10, 0x1}) 15:29:14 executing program 5: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000000)={0x0, 0x8000, 0x94d, 0x7, 0x3e000000, 0x6, 0x5, 0x1, 0x2, 0x2, 0x3, 0x3ff}) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) 15:29:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000100)) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) (async) 15:29:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x401c5820, 0x0) 15:29:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000140001d72a0000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xffffffffffffffff, 0x7e, 0xff, @buffer={0x0, 0x5d, &(0x7f0000000100)=""/93}, &(0x7f0000000180)="ce2c0e80e45a9e3b3a3378fa53b3d17259aa0cee495d906f2824a24c4b5d9cae7fce0d4598daac5c6db2ad727f1438874e0f50d9e464af1668ac5a6bc28075ab2ca86b98616faaec95ca509f5d099ca8b51cba99c7c2355063fb56c0d3634f944c456476f8e2220717c25929f3c887e6e04246db2fd208f1042b8f23da4c", &(0x7f0000000200)=""/197, 0x5, 0x10, 0x1}) 15:29:14 executing program 3: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000200), 0x4) recvmsg$can_j1939(r2, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getlink={0x28, 0x12, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x500, 0x40210}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x430}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000000)={0x0, 0x8000, 0x94d, 0x7, 0x3e000000, 0x6, 0x5, 0x1, 0x2, 0x2, 0x3, 0x3ff}) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 64) 15:29:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000100)) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) 15:29:15 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x401c5820, 0x0) 15:29:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x4000051) 15:29:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) 15:29:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) (rerun: 64) 15:29:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x4000051) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x4000051) (async) 15:29:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NBD_PRINT_DEBUG(0xffffffffffffffff, 0xab06) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:15 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x401c5820, 0x0) 15:29:15 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newaddr={0x58, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010101}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_RT_PRIORITY={0x8, 0x9, 0x40}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x80, 0x3ff, 0x4}}, @IFA_LABEL={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x58}}, 0x0) 15:29:15 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x401c5820, &(0x7f00000002c0)={0x0, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000200), 0x4) recvmsg$can_j1939(r2, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getlink={0x28, 0x12, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x500, 0x40210}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x430}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x4000051) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x4000051) (async) 15:29:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NBD_PRINT_DEBUG(0xffffffffffffffff, 0xab06) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$NBD_PRINT_DEBUG(0xffffffffffffffff, 0xab06) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) 15:29:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) 15:29:15 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newaddr={0x58, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010101}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_RT_PRIORITY={0x8, 0x9, 0x40}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x80, 0x3ff, 0x4}}, @IFA_LABEL={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x58}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newaddr={0x58, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010101}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_RT_PRIORITY={0x8, 0x9, 0x40}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x80, 0x3ff, 0x4}}, @IFA_LABEL={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x58}}, 0x0) (async) 15:29:15 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x401c5820, &(0x7f00000002c0)={0x0, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:16 executing program 3: r0 = socket(0x8, 0x80000, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000500)=[{}, {}], 0x10, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x10, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bind$can_j1939(r0, &(0x7f0000000280)={0x1d, r1, 0x0, {0x1, 0xff}, 0x1}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:16 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newaddr={0x58, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010101}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_RT_PRIORITY={0x8, 0x9, 0x40}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x80, 0x3ff, 0x4}}, @IFA_LABEL={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x58}}, 0x0) 15:29:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$NBD_PRINT_DEBUG(0xffffffffffffffff, 0xab06) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:16 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x401c5820, &(0x7f00000002c0)={0x0, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x1, 0x8, 0x54, @dev={0xfe, 0x80, '\x00', 0x37}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x1, 0x7, 0x9}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x68, 0x14, 0x1, 0x0, 0x80000003, {0x2, 0x1f}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x4, 0x3f, 0x1}}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xa}}]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x20, 0x222000) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) 15:29:16 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000200), 0x4) recvmsg$can_j1939(r1, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getlink={0x28, 0x12, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x500, 0x40210}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x430}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) 15:29:16 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="ff000000d05f4c100002000000f5ead85a001c02", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:16 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x401c5820, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:16 executing program 3: socket(0x8, 0x80000, 0x2) (async) r0 = socket(0x8, 0x80000, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000500)=[{}, {}], 0x10, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x10, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bind$can_j1939(r0, &(0x7f0000000280)={0x1d, r1, 0x0, {0x1, 0xff}, 0x1}, 0x18) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x1, 0x8, 0x54, @dev={0xfe, 0x80, '\x00', 0x37}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x1, 0x7, 0x9}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x1, 0x8, 0x54, @dev={0xfe, 0x80, '\x00', 0x37}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x1, 0x7, 0x9}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x68, 0x14, 0x1, 0x0, 0x80000003, {0x2, 0x1f}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x4, 0x3f, 0x1}}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xa}}]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x20, 0x222000) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x20, 0x222000) (async) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) (async) 15:29:16 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="ff000000d05f4c100002000000f5ead85a001c02", @ANYRES32=0x0], 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="ff000000d05f4c100002000000f5ead85a001c02", @ANYRES32=0x0], 0x18}}, 0x0) (async) 15:29:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x1, 0x8, 0x54, @dev={0xfe, 0x80, '\x00', 0x37}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x1, 0x7, 0x9}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x68, 0x14, 0x1, 0x0, 0x80000003, {0x2, 0x1f}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x4, 0x3f, 0x1}}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xa}}]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:16 executing program 3: r0 = socket(0x8, 0x80000, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000500)=[{}, {}], 0x10, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x10, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bind$can_j1939(r0, &(0x7f0000000280)={0x1d, r1, 0x0, {0x1, 0xff}, 0x1}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x8, 0x80000, 0x2) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000500)=[{}, {}], 0x10, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x10, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) (async) bind$can_j1939(r0, &(0x7f0000000280)={0x1d, r1, 0x0, {0x1, 0xff}, 0x1}, 0x18) (async) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$SG_IO(r2, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 15:29:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x1, 0x8, 0x54, @dev={0xfe, 0x80, '\x00', 0x37}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x1, 0x7, 0x9}}) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x68, 0x14, 0x1, 0x0, 0x80000003, {0x2, 0x1f}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x4, 0x3f, 0x1}}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xa}}]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x0) (rerun: 32) 15:29:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x20, 0x222000) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) 15:29:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x1, 0x8, 0x54, @dev={0xfe, 0x80, '\x00', 0x37}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x1, 0x7, 0x9}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x68, 0x14, 0x1, 0x0, 0x80000003, {0x2, 0x1f}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x4, 0x3f, 0x1}}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xa}}]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:17 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000200), 0x4) recvmsg$can_j1939(r1, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:17 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000240)={0x53, 0x190f2cf46fcabf66, 0xc2, 0x9, @buffer={0x0, 0x1000, &(0x7f0000000340)=""/4096}, &(0x7f0000000080)="a88cade3580d463378f4ed9d7ed3b556468662abdc32e8c01e5c12ae829a10be12d2ba9039b6c8a576513a1880d9cf689866db481bc8ed5b7206e46bf9deb4a0381eef0c037ee13eb1bf3a9f4bafaa4e6cd36b4cdcb99106525aa460563f8c574666b6f456dc69ad80abc9196911a61e5a683d6c2b69fd35d1b1c108b6531d17d3d0a9341e243222818456e921311b092fed1662c222c8d7d7da97033c16a741445397139ac69c1a38c973b2fe1fba8b2ae0ce939f9913422c56dd81443c509ce37d", &(0x7f00000001c0)=""/97, 0x8001, 0x8, 0x1}) r0 = syz_open_dev$sg(&(0x7f0000001340), 0x5, 0x800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="e03d315e653000"]) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f00000013c0)) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000001480)) ioctl$SG_IO(r2, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) renameat(r1, &(0x7f0000001400)='./file0\x00', r3, &(0x7f0000001440)='./file0/file0\x00') 15:29:17 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) mmap$dsp(&(0x7f0000fe8000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$I2C_SLAVE(r1, 0x703, 0x246) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x41) socket$nl_route(0x10, 0x3, 0x0) 15:29:17 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="ff000000d05f4c100002000000f5ead85a001c02", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x2}, 0x18}, 0x1, 0x0, 0x0, 0x4801}, 0x0) 15:29:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x1, 0x8, 0x54, @dev={0xfe, 0x80, '\x00', 0x37}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x1, 0x7, 0x9}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x68, 0x14, 0x1, 0x0, 0x80000003, {0x2, 0x1f}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x4, 0x3f, 0x1}}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xa}}]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000014000100000000000400000002000000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:17 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000240)={0x53, 0x190f2cf46fcabf66, 0xc2, 0x9, @buffer={0x0, 0x1000, &(0x7f0000000340)=""/4096}, &(0x7f0000000080)="a88cade3580d463378f4ed9d7ed3b556468662abdc32e8c01e5c12ae829a10be12d2ba9039b6c8a576513a1880d9cf689866db481bc8ed5b7206e46bf9deb4a0381eef0c037ee13eb1bf3a9f4bafaa4e6cd36b4cdcb99106525aa460563f8c574666b6f456dc69ad80abc9196911a61e5a683d6c2b69fd35d1b1c108b6531d17d3d0a9341e243222818456e921311b092fed1662c222c8d7d7da97033c16a741445397139ac69c1a38c973b2fe1fba8b2ae0ce939f9913422c56dd81443c509ce37d", &(0x7f00000001c0)=""/97, 0x8001, 0x8, 0x1}) r0 = syz_open_dev$sg(&(0x7f0000001340), 0x5, 0x800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="e03d315e653000"]) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f00000013c0)) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000001480)) ioctl$SG_IO(r2, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) renameat(r1, &(0x7f0000001400)='./file0\x00', r3, &(0x7f0000001440)='./file0/file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000240)={0x53, 0x190f2cf46fcabf66, 0xc2, 0x9, @buffer={0x0, 0x1000, &(0x7f0000000340)=""/4096}, &(0x7f0000000080)="a88cade3580d463378f4ed9d7ed3b556468662abdc32e8c01e5c12ae829a10be12d2ba9039b6c8a576513a1880d9cf689866db481bc8ed5b7206e46bf9deb4a0381eef0c037ee13eb1bf3a9f4bafaa4e6cd36b4cdcb99106525aa460563f8c574666b6f456dc69ad80abc9196911a61e5a683d6c2b69fd35d1b1c108b6531d17d3d0a9341e243222818456e921311b092fed1662c222c8d7d7da97033c16a741445397139ac69c1a38c973b2fe1fba8b2ae0ce939f9913422c56dd81443c509ce37d", &(0x7f00000001c0)=""/97, 0x8001, 0x8, 0x1}) (async) syz_open_dev$sg(&(0x7f0000001340), 0x5, 0x800) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="e03d315e653000"]) (async) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f00000013c0)) (async) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000001480)) (async) ioctl$SG_IO(r2, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) renameat(r1, &(0x7f0000001400)='./file0\x00', r3, &(0x7f0000001440)='./file0/file0\x00') (async) 15:29:17 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) mmap$dsp(&(0x7f0000fe8000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$I2C_SLAVE(r1, 0x703, 0x246) (async) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x41) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) 15:29:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x68, 0x14, 0x1, 0x0, 0x80000003, {0x2, 0x1f}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x4, 0x3f, 0x1}}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xa}}]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0xc) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x2}, 0x18}, 0x1, 0x0, 0x0, 0x4801}, 0x0) (rerun: 64) 15:29:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000014000100000000000400000002000000", @ANYRES32=0x0], 0x18}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000014000100000000000400000002000000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:18 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:18 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000240)={0x53, 0x190f2cf46fcabf66, 0xc2, 0x9, @buffer={0x0, 0x1000, &(0x7f0000000340)=""/4096}, &(0x7f0000000080)="a88cade3580d463378f4ed9d7ed3b556468662abdc32e8c01e5c12ae829a10be12d2ba9039b6c8a576513a1880d9cf689866db481bc8ed5b7206e46bf9deb4a0381eef0c037ee13eb1bf3a9f4bafaa4e6cd36b4cdcb99106525aa460563f8c574666b6f456dc69ad80abc9196911a61e5a683d6c2b69fd35d1b1c108b6531d17d3d0a9341e243222818456e921311b092fed1662c222c8d7d7da97033c16a741445397139ac69c1a38c973b2fe1fba8b2ae0ce939f9913422c56dd81443c509ce37d", &(0x7f00000001c0)=""/97, 0x8001, 0x8, 0x1}) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000240)={0x53, 0x190f2cf46fcabf66, 0xc2, 0x9, @buffer={0x0, 0x1000, &(0x7f0000000340)=""/4096}, &(0x7f0000000080)="a88cade3580d463378f4ed9d7ed3b556468662abdc32e8c01e5c12ae829a10be12d2ba9039b6c8a576513a1880d9cf689866db481bc8ed5b7206e46bf9deb4a0381eef0c037ee13eb1bf3a9f4bafaa4e6cd36b4cdcb99106525aa460563f8c574666b6f456dc69ad80abc9196911a61e5a683d6c2b69fd35d1b1c108b6531d17d3d0a9341e243222818456e921311b092fed1662c222c8d7d7da97033c16a741445397139ac69c1a38c973b2fe1fba8b2ae0ce939f9913422c56dd81443c509ce37d", &(0x7f00000001c0)=""/97, 0x8001, 0x8, 0x1}) r0 = syz_open_dev$sg(&(0x7f0000001340), 0x5, 0x800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="e03d315e653000"]) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f00000013c0)) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000001480)) ioctl$SG_IO(r2, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$SG_IO(r2, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) renameat(r1, &(0x7f0000001400)='./file0\x00', r3, &(0x7f0000001440)='./file0/file0\x00') 15:29:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x68, 0x14, 0x1, 0x0, 0x80000003, {0x2, 0x1f}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x4, 0x3f, 0x1}}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xa}}]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:18 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) mmap$dsp(&(0x7f0000fe8000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$I2C_SLAVE(r1, 0x703, 0x246) (async) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x41) socket$nl_route(0x10, 0x3, 0x0) 15:29:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000014000100000000000400000002000000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0xc) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x2}, 0x18}, 0x1, 0x0, 0x0, 0x4801}, 0x0) 15:29:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x68, 0x14, 0x1, 0x0, 0x80000003, {0x2, 0x1f}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x4, 0x3f, 0x1}}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xa}}]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0xe2f}, 0x14}}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="020528bd7000fddbdf25250045e50a8af97e31777852528e7c83bc1e09956725fe4b6591eb210af5f1cee1a5c7c4159fad0e3c218ebb896ebfb4bb68ddf9a1d0f4cce6ecd36e901853bd3ca305a28cc0f69d5ab531f2aeea67974b560509b3f421068cea280990df154a129fd93dfa0568a0c69939aeb0902f9bd86bcdf61bd1e2adcd47f3d6fdeecd23a1e3e19a65473069735a413d8940c54e"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004001) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x9, 0x8110, r2, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0x6, 0xcc3) mmap$qrtrtun(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x2000000, 0x810, r3, 0x44a) munlock(&(0x7f0000ff4000/0x1000)=nil, 0x1000) ioctl$MON_IOCQ_URB_LEN(r4, 0x9201) mmap$snddsp_control(&(0x7f0000ff5000/0x2000)=nil, 0x1000, 0x200000a, 0x12, r4, 0x83000000) ioctl$I2C_SLAVE(r4, 0x703, 0x216) 15:29:18 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x280001, 0x20) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2e521712eac65f57752afdd4f72e05fa0000", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x4048004}, 0x0) 15:29:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x1, 0x2, 0x22, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x20, 0x20, 0xfffffffa, 0x8}}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x5, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x1804) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20}}, 0x18}}, 0x0) 15:29:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0xd59, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000100)) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000000)) 15:29:18 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x68, 0x14, 0x1, 0x0, 0x80000003, {0x2, 0x1f}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x4, 0x3f, 0x1}}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xa}}]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:19 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x1, 0x2, 0x22, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x20, 0x20, 0xfffffffa, 0x8}}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x5, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x1804) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20}}, 0x18}}, 0x0) 15:29:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0xe2f}, 0x14}}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="020528bd7000fddbdf25250045e50a8af97e31777852528e7c83bc1e09956725fe4b6591eb210af5f1cee1a5c7c4159fad0e3c218ebb896ebfb4bb68ddf9a1d0f4cce6ecd36e901853bd3ca305a28cc0f69d5ab531f2aeea67974b560509b3f421068cea280990df154a129fd93dfa0568a0c69939aeb0902f9bd86bcdf61bd1e2adcd47f3d6fdeecd23a1e3e19a65473069735a413d8940c54e"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004001) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x9, 0x8110, r2, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0x6, 0xcc3) mmap$qrtrtun(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x2000000, 0x810, r3, 0x44a) munlock(&(0x7f0000ff4000/0x1000)=nil, 0x1000) ioctl$MON_IOCQ_URB_LEN(r4, 0x9201) mmap$snddsp_control(&(0x7f0000ff5000/0x2000)=nil, 0x1000, 0x200000a, 0x12, r4, 0x83000000) ioctl$I2C_SLAVE(r4, 0x703, 0x216) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0xe2f}, 0x14}}, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="020528bd7000fddbdf25250045e50a8af97e31777852528e7c83bc1e09956725fe4b6591eb210af5f1cee1a5c7c4159fad0e3c218ebb896ebfb4bb68ddf9a1d0f4cce6ecd36e901853bd3ca305a28cc0f69d5ab531f2aeea67974b560509b3f421068cea280990df154a129fd93dfa0568a0c69939aeb0902f9bd86bcdf61bd1e2adcd47f3d6fdeecd23a1e3e19a65473069735a413d8940c54e"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004001) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x9, 0x8110, r2, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000100), 0x6, 0xcc3) (async) mmap$qrtrtun(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x2000000, 0x810, r3, 0x44a) (async) munlock(&(0x7f0000ff4000/0x1000)=nil, 0x1000) (async) ioctl$MON_IOCQ_URB_LEN(r4, 0x9201) (async) mmap$snddsp_control(&(0x7f0000ff5000/0x2000)=nil, 0x1000, 0x200000a, 0x12, r4, 0x83000000) (async) ioctl$I2C_SLAVE(r4, 0x703, 0x216) (async) 15:29:19 executing program 2: socket$nl_route(0x10, 0x3, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x280001, 0x20) (async) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x280001, 0x20) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2e521712eac65f57752afdd4f72e05fa0000", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x4048004}, 0x0) 15:29:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x1, 0x2, 0x22, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x20, 0x20, 0xfffffffa, 0x8}}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x5, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x1804) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20}}, 0x18}}, 0x0) 15:29:19 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x68, 0x14, 0x1, 0x0, 0x80000003, {0x2, 0x1f}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x4, 0x3f, 0x1}}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xa}}]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:19 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0xd59, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000100)) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000000)) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_open_dev$sg(&(0x7f00000000c0), 0xd59, 0x0) (async) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000100)) (async) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000000)) (async) 15:29:19 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x68, 0x14, 0x1, 0x0, 0x80000003, {0x2, 0x1f}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x4, 0x3f, 0x1}}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xa}}]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:19 executing program 2: socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x280001, 0x20) (rerun: 64) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2e521712eac65f57752afdd4f72e05fa0000", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x4048004}, 0x0) 15:29:19 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:19 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0xd59, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000100)) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000000)) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_open_dev$sg(&(0x7f00000000c0), 0xd59, 0x0) (async) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000100)) (async) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000000)) (async) 15:29:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0xe2f}, 0x14}}, 0x0) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="020528bd7000fddbdf25250045e50a8af97e31777852528e7c83bc1e09956725fe4b6591eb210af5f1cee1a5c7c4159fad0e3c218ebb896ebfb4bb68ddf9a1d0f4cce6ecd36e901853bd3ca305a28cc0f69d5ab531f2aeea67974b560509b3f421068cea280990df154a129fd93dfa0568a0c69939aeb0902f9bd86bcdf61bd1e2adcd47f3d6fdeecd23a1e3e19a65473069735a413d8940c54e"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004001) (async) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x9, 0x8110, r2, 0x0) (async) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0x6, 0xcc3) mmap$qrtrtun(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x2000000, 0x810, r3, 0x44a) (async) munlock(&(0x7f0000ff4000/0x1000)=nil, 0x1000) (async) ioctl$MON_IOCQ_URB_LEN(r4, 0x9201) (async) mmap$snddsp_control(&(0x7f0000ff5000/0x2000)=nil, 0x1000, 0x200000a, 0x12, r4, 0x83000000) (async) ioctl$I2C_SLAVE(r4, 0x703, 0x216) 15:29:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0xe0, 0xd9, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @local, 0x10, 0x8, 0x4, 0x7}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0xae, 0x0, r1}}, 0x18}}, 0x0) 15:29:19 executing program 5: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x68, 0x14, 0x1, 0x0, 0x80000003, {0x2, 0x1f}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x4, 0x3f, 0x1}}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xa}}]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:19 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0xe0, 0xd9, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @local, 0x10, 0x8, 0x4, 0x7}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0xae, 0x0, r1}}, 0x18}}, 0x0) 15:29:19 executing program 3: syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x200000) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x48, 0x14, 0x200, 0x70bd26, 0x25dfdbfc, {0xa, 0x18, 0x5, 0xfe}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3b}}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20004040) syz_open_dev$sg(&(0x7f00000000c0), 0x8000000000000000, 0x4000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:19 executing program 5: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x68, 0x14, 0x1, 0x0, 0x80000003, {0x2, 0x1f}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x4, 0x3f, 0x1}}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xa}}]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:19 executing program 1: fanotify_mark(0xffffffffffffffff, 0x80, 0x1000, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$snddsp_control(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x100000e, 0x810, 0xffffffffffffffff, 0x83000000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="1800f7ffffff00000000000000e23f653ae852533d71c5390ccdae1308a458a9e402bee697f856568b9391889eba73e589d707f26466ae64151c36b8d1a8dcb7a6a69a4c30c8107ccea9e265abd13a23f72ce1b427fac21ae87cc15dd8389403399f9647d69414f453e2ef70d307b68206018460c9e45fbbd9d57ded459a53878280ee66eabb2ac03cd4d92e51061d2764bf91c1477542d5176d27ce27530a1718b35be969b81e835515a2b173353815b2e647a9a71898cd78b669dc41b516f156e1e7ab4450c679690f206753", @ANYRES32=0x0], 0x18}}, 0x0) mmap$snddsp_control(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x8010, 0xffffffffffffffff, 0x83000000) r1 = socket(0x11, 0x4, 0x1) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r2, 0x215b670c9b96d406, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0xc000) 15:29:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="18f843c47d00000300100000000000000002380000000000159784671b2d32780df087ef160670f150b4038b73202bd710c72a660c6bcefcf28a31b7752cd3ae94eaf1dd5780282010bbfc35935ff6e7e1618e6199f63669527e30b483898bea2a3dac4d5f171f1a62b691cee304778c35feb6ed90c5a0a34ebfc26c3c6db2a9be7a05da5899f3ade56dea9ad001bba265e70feaa9090ff3e6e2d66a5851e53910f982101f292dbd33ece7cbdbbec1f9e21604c0e6a01027e43b1d6dcf30123d152343e1c58227921e72b68a0b0000ded9f71d", @ANYRES32=0x0], 0x18}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 15:29:20 executing program 4: socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0xe0, 0xd9, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @local, 0x10, 0x8, 0x4, 0x7}}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0xae, 0x0, r1}}, 0x18}}, 0x0) 15:29:20 executing program 5: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x68, 0x14, 0x1, 0x0, 0x80000003, {0x2, 0x1f}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x4, 0x3f, 0x1}}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xa}}]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:20 executing program 3: syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x200000) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x48, 0x14, 0x200, 0x70bd26, 0x25dfdbfc, {0xa, 0x18, 0x5, 0xfe}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3b}}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20004040) (async) syz_open_dev$sg(&(0x7f00000000c0), 0x8000000000000000, 0x4000) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:20 executing program 1: fanotify_mark(0xffffffffffffffff, 0x80, 0x1000, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) mmap$snddsp_control(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x100000e, 0x810, 0xffffffffffffffff, 0x83000000) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="1800f7ffffff00000000000000e23f653ae852533d71c5390ccdae1308a458a9e402bee697f856568b9391889eba73e589d707f26466ae64151c36b8d1a8dcb7a6a69a4c30c8107ccea9e265abd13a23f72ce1b427fac21ae87cc15dd8389403399f9647d69414f453e2ef70d307b68206018460c9e45fbbd9d57ded459a53878280ee66eabb2ac03cd4d92e51061d2764bf91c1477542d5176d27ce27530a1718b35be969b81e835515a2b173353815b2e647a9a71898cd78b669dc41b516f156e1e7ab4450c679690f206753", @ANYRES32=0x0], 0x18}}, 0x0) (async) mmap$snddsp_control(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x8010, 0xffffffffffffffff, 0x83000000) (async) r1 = socket(0x11, 0x4, 0x1) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r1) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r2, 0x215b670c9b96d406, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0xc000) 15:29:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="18f843c47d00000300100000000000000002380000000000159784671b2d32780df087ef160670f150b4038b73202bd710c72a660c6bcefcf28a31b7752cd3ae94eaf1dd5780282010bbfc35935ff6e7e1618e6199f63669527e30b483898bea2a3dac4d5f171f1a62b691cee304778c35feb6ed90c5a0a34ebfc26c3c6db2a9be7a05da5899f3ade56dea9ad001bba265e70feaa9090ff3e6e2d66a5851e53910f982101f292dbd33ece7cbdbbec1f9e21604c0e6a01027e43b1d6dcf30123d152343e1c58227921e72b68a0b0000ded9f71d", @ANYRES32=0x0], 0x18}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 15:29:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 15:29:20 executing program 0: mlock(&(0x7f0000ff7000/0x4000)=nil, 0x4000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x0, 0x70bd26}, 0x14}}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r3, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x6000c000) r4 = openat$incfs(r1, &(0x7f0000000340)='.pending_reads\x00', 0x0, 0x21) sendmsg$nl_route(r4, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@mpls_getnetconf={0x1c, 0x52, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x21000}, 0x4040) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r5, 0x89e0, &(0x7f0000000040)=0x400) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000300)) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14006200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000804}, 0x22040880) 15:29:20 executing program 1: fanotify_mark(0xffffffffffffffff, 0x80, 0x1000, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$snddsp_control(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x100000e, 0x810, 0xffffffffffffffff, 0x83000000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="1800f7ffffff00000000000000e23f653ae852533d71c5390ccdae1308a458a9e402bee697f856568b9391889eba73e589d707f26466ae64151c36b8d1a8dcb7a6a69a4c30c8107ccea9e265abd13a23f72ce1b427fac21ae87cc15dd8389403399f9647d69414f453e2ef70d307b68206018460c9e45fbbd9d57ded459a53878280ee66eabb2ac03cd4d92e51061d2764bf91c1477542d5176d27ce27530a1718b35be969b81e835515a2b173353815b2e647a9a71898cd78b669dc41b516f156e1e7ab4450c679690f206753", @ANYRES32=0x0], 0x18}}, 0x0) mmap$snddsp_control(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x8010, 0xffffffffffffffff, 0x83000000) r1 = socket(0x11, 0x4, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r1) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r2, 0x215b670c9b96d406, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0xc000) 15:29:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 15:29:20 executing program 0: mlock(&(0x7f0000ff7000/0x4000)=nil, 0x4000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x0, 0x70bd26}, 0x14}}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r3, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x6000c000) r4 = openat$incfs(r1, &(0x7f0000000340)='.pending_reads\x00', 0x0, 0x21) sendmsg$nl_route(r4, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@mpls_getnetconf={0x1c, 0x52, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x21000}, 0x4040) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r5, 0x89e0, &(0x7f0000000040)=0x400) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000300)) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14006200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000804}, 0x22040880) mlock(&(0x7f0000ff7000/0x4000)=nil, 0x4000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x18}}, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x0, 0x70bd26}, 0x14}}, 0x0) (async) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r3, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x6000c000) (async) openat$incfs(r1, &(0x7f0000000340)='.pending_reads\x00', 0x0, 0x21) (async) sendmsg$nl_route(r4, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@mpls_getnetconf={0x1c, 0x52, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x21000}, 0x4040) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) ioctl$SIOCPNADDRESOURCE(r5, 0x89e0, &(0x7f0000000040)=0x400) (async) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000300)) (async) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14006200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000804}, 0x22040880) (async) 15:29:20 executing program 3: syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x200000) (async) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x48, 0x14, 0x200, 0x70bd26, 0x25dfdbfc, {0xa, 0x18, 0x5, 0xfe}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3b}}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20004040) (rerun: 64) syz_open_dev$sg(&(0x7f00000000c0), 0x8000000000000000, 0x4000) (async, rerun: 64) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) 15:29:20 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 15:29:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$phonet(0xffffffffffffffff, &(0x7f0000000100)={0x23, 0x0, 0x1f, 0x3}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:20 executing program 0: mlock(&(0x7f0000ff7000/0x4000)=nil, 0x4000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x0, 0x70bd26}, 0x14}}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r3, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x6000c000) r4 = openat$incfs(r1, &(0x7f0000000340)='.pending_reads\x00', 0x0, 0x21) sendmsg$nl_route(r4, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@mpls_getnetconf={0x1c, 0x52, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x21000}, 0x4040) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r5, 0x89e0, &(0x7f0000000040)=0x400) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000300)) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14006200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000804}, 0x22040880) mlock(&(0x7f0000ff7000/0x4000)=nil, 0x4000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x18}}, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x0, 0x70bd26}, 0x14}}, 0x0) (async) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r3, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x6000c000) (async) openat$incfs(r1, &(0x7f0000000340)='.pending_reads\x00', 0x0, 0x21) (async) sendmsg$nl_route(r4, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@mpls_getnetconf={0x1c, 0x52, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x21000}, 0x4040) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) ioctl$SIOCPNADDRESOURCE(r5, 0x89e0, &(0x7f0000000040)=0x400) (async) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000300)) (async) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14006200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000804}, 0x22040880) (async) 15:29:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="18f843c47d00000300100000000000000002380000000000159784671b2d32780df087ef160670f150b4038b73202bd710c72a660c6bcefcf28a31b7752cd3ae94eaf1dd5780282010bbfc35935ff6e7e1618e6199f63669527e30b483898bea2a3dac4d5f171f1a62b691cee304778c35feb6ed90c5a0a34ebfc26c3c6db2a9be7a05da5899f3ade56dea9ad001bba265e70feaa9090ff3e6e2d66a5851e53910f982101f292dbd33ece7cbdbbec1f9e21604c0e6a01027e43b1d6dcf30123d152343e1c58227921e72b68a0b0000ded9f71d", @ANYRES32=0x0], 0x18}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 15:29:20 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) openat$incfs(0xffffffffffffff9c, &(0x7f00000004c0)='.pending_reads\x00', 0x8000, 0x40) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x20, @scatter={0x7, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f0000000280)=""/185, 0xb9}, {&(0x7f0000000000)=""/13, 0xd}, {&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000340)=""/81, 0x51}, {&(0x7f00000003c0)=""/58, 0x3a}, {&(0x7f0000000400)=""/6, 0x6}]}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x36, 0x0, 0x0}) 15:29:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$phonet(0xffffffffffffffff, &(0x7f0000000100)={0x23, 0x0, 0x1f, 0x3}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000100)={0x8, 0x2, 0x4, 0x0, 0x1, {}, {0x4, 0x1, 0x1, 0x2, 0x6, 0x20, "6e05351f"}, 0x7fff, 0x4, {}, 0xffff, 0x0, r2}) 15:29:20 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) openat$incfs(0xffffffffffffff9c, &(0x7f00000004c0)='.pending_reads\x00', 0x8000, 0x40) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x20, @scatter={0x7, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f0000000280)=""/185, 0xb9}, {&(0x7f0000000000)=""/13, 0xd}, {&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000340)=""/81, 0x51}, {&(0x7f00000003c0)=""/58, 0x3a}, {&(0x7f0000000400)=""/6, 0x6}]}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x36, 0x0, 0x0}) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x20, @scatter={0x7, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f0000000280)=""/185, 0xb9}, {&(0x7f0000000000)=""/13, 0xd}, {&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000340)=""/81, 0x51}, {&(0x7f00000003c0)=""/58, 0x3a}, {&(0x7f0000000400)=""/6, 0x6}]}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x36, 0x0, 0x0}) 15:29:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8329899ec9d548d0}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@newlinkprop={0xa4, 0x6c, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x18000, 0x20000}, [@IFLA_CARRIER_CHANGES={0x8}, @IFLA_PHYS_SWITCH_ID={0x1a, 0x24, "01b17873764891649f9faec76c78ef65149502429273"}, @IFLA_PHYS_SWITCH_ID={0x16, 0x24, "5ca3ea1b33027b310293846568c59c066f26"}, @IFLA_BROADCAST={0xa}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_macvtap\x00'}]}, @IFLA_TXQLEN={0x8, 0xd, 0x5}, @IFLA_VFINFO_LIST={0x4}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}, @IFLA_EXT_MASK={0x8, 0x1d, 0x7}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x2000c831) 15:29:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bind$phonet(0xffffffffffffffff, &(0x7f0000000100)={0x23, 0x0, 0x1f, 0x3}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) (async) openat$incfs(0xffffffffffffff9c, &(0x7f00000004c0)='.pending_reads\x00', 0x8000, 0x40) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x20, @scatter={0x7, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f0000000280)=""/185, 0xb9}, {&(0x7f0000000000)=""/13, 0xd}, {&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000340)=""/81, 0x51}, {&(0x7f00000003c0)=""/58, 0x3a}, {&(0x7f0000000400)=""/6, 0x6}]}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x36, 0x0, 0x0}) 15:29:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000100)={0x8, 0x2, 0x4, 0x0, 0x1, {}, {0x4, 0x1, 0x1, 0x2, 0x6, 0x20, "6e05351f"}, 0x7fff, 0x4, {}, 0xffff, 0x0, r2}) 15:29:21 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:21 executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8329899ec9d548d0}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@newlinkprop={0xa4, 0x6c, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x18000, 0x20000}, [@IFLA_CARRIER_CHANGES={0x8}, @IFLA_PHYS_SWITCH_ID={0x1a, 0x24, "01b17873764891649f9faec76c78ef65149502429273"}, @IFLA_PHYS_SWITCH_ID={0x16, 0x24, "5ca3ea1b33027b310293846568c59c066f26"}, @IFLA_BROADCAST={0xa}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_macvtap\x00'}]}, @IFLA_TXQLEN={0x8, 0xd, 0x5}, @IFLA_VFINFO_LIST={0x4}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}, @IFLA_EXT_MASK={0x8, 0x1d, 0x7}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x2000c831) 15:29:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8329899ec9d548d0}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@newlinkprop={0xa4, 0x6c, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x18000, 0x20000}, [@IFLA_CARRIER_CHANGES={0x8}, @IFLA_PHYS_SWITCH_ID={0x1a, 0x24, "01b17873764891649f9faec76c78ef65149502429273"}, @IFLA_PHYS_SWITCH_ID={0x16, 0x24, "5ca3ea1b33027b310293846568c59c066f26"}, @IFLA_BROADCAST={0xa}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_macvtap\x00'}]}, @IFLA_TXQLEN={0x8, 0xd, 0x5}, @IFLA_VFINFO_LIST={0x4}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}, @IFLA_EXT_MASK={0x8, 0x1d, 0x7}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x2000c831) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8329899ec9d548d0}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@newlinkprop={0xa4, 0x6c, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x18000, 0x20000}, [@IFLA_CARRIER_CHANGES={0x8}, @IFLA_PHYS_SWITCH_ID={0x1a, 0x24, "01b17873764891649f9faec76c78ef65149502429273"}, @IFLA_PHYS_SWITCH_ID={0x16, 0x24, "5ca3ea1b33027b310293846568c59c066f26"}, @IFLA_BROADCAST={0xa}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_macvtap\x00'}]}, @IFLA_TXQLEN={0x8, 0xd, 0x5}, @IFLA_VFINFO_LIST={0x4}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}, @IFLA_EXT_MASK={0x8, 0x1d, 0x7}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x2000c831) 15:29:21 executing program 3: remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x80000) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="3c1241891f47", 0x0, 0x0, 0x10001, 0x3, 0x0}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffd, 0x4d, 0xd, @buffer={0x0, 0x66, &(0x7f0000000080)=""/102}, &(0x7f0000000100)="d039d833077b4a29a774610806b975e7f64e43fab1b1dfded9f1b514d246acce7e7d571d54d865e1e69d2f9b24ae7d96485095162c001a1153a0ab294fd6d7ff4f4514b54886f63add07a3eb25", &(0x7f00000001c0)=""/101, 0x3, 0x10, 0xffffffffffffffff}) 15:29:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000100)={0x8, 0x2, 0x4, 0x0, 0x1, {}, {0x4, 0x1, 0x1, 0x2, 0x6, 0x20, "6e05351f"}, 0x7fff, 0x4, {}, 0xffff, 0x0, r2}) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000100)={0x8, 0x2, 0x4, 0x0, 0x1, {}, {0x4, 0x1, 0x1, 0x2, 0x6, 0x20, "6e05351f"}, 0x7fff, 0x4, {}, 0xffff, 0x0, r2}) (async) 15:29:21 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={&(0x7f0000000100), &(0x7f0000000140)=""/230, 0xe6}) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800000014007e59350108000000000900000074d90000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:22 executing program 3: remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x80000) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="3c1241891f47", 0x0, 0x0, 0x10001, 0x3, 0x0}) (async) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffd, 0x4d, 0xd, @buffer={0x0, 0x66, &(0x7f0000000080)=""/102}, &(0x7f0000000100)="d039d833077b4a29a774610806b975e7f64e43fab1b1dfded9f1b514d246acce7e7d571d54d865e1e69d2f9b24ae7d96485095162c001a1153a0ab294fd6d7ff4f4514b54886f63add07a3eb25", &(0x7f00000001c0)=""/101, 0x3, 0x10, 0xffffffffffffffff}) 15:29:22 executing program 4: r0 = socket(0x0, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:22 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={&(0x7f0000000100), &(0x7f0000000140)=""/230, 0xe6}) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800000014007e59350108000000000900000074d90000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="18010000140001000004000000009acd9aced55251e6000002020008", @ANYRES32=0x0], 0x18}}, 0x0) syz_io_uring_setup(0x4d04, &(0x7f0000000100)={0x0, 0x8987, 0x800, 0x2, 0xd8}, &(0x7f0000fea000/0x14000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x40200) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x2004, @fd=r2, 0x8000000000000001, 0x0, 0x0, 0x10, 0x2}, 0x7) 15:29:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x1407, 0x800, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040800) 15:29:22 executing program 3: remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x80000) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="3c1241891f47", 0x0, 0x0, 0x10001, 0x3, 0x0}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffd, 0x4d, 0xd, @buffer={0x0, 0x66, &(0x7f0000000080)=""/102}, &(0x7f0000000100)="d039d833077b4a29a774610806b975e7f64e43fab1b1dfded9f1b514d246acce7e7d571d54d865e1e69d2f9b24ae7d96485095162c001a1153a0ab294fd6d7ff4f4514b54886f63add07a3eb25", &(0x7f00000001c0)=""/101, 0x3, 0x10, 0xffffffffffffffff}) remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x80000) (async) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="3c1241891f47", 0x0, 0x0, 0x10001, 0x3, 0x0}) (async) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffd, 0x4d, 0xd, @buffer={0x0, 0x66, &(0x7f0000000080)=""/102}, &(0x7f0000000100)="d039d833077b4a29a774610806b975e7f64e43fab1b1dfded9f1b514d246acce7e7d571d54d865e1e69d2f9b24ae7d96485095162c001a1153a0ab294fd6d7ff4f4514b54886f63add07a3eb25", &(0x7f00000001c0)=""/101, 0x3, 0x10, 0xffffffffffffffff}) (async) 15:29:22 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={&(0x7f0000000100), &(0x7f0000000140)=""/230, 0xe6}) (async, rerun: 64) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800000014007e59350108000000000900000074d90000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x68, 0x14, 0x0, 0x0, 0x80000003, {0x2, 0x1f}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x4, 0x3f, 0x1}}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xa}}]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x1407, 0x800, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040800) 15:29:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="18010000140001000004000000009acd9aced55251e6000002020008", @ANYRES32=0x0], 0x18}}, 0x0) syz_io_uring_setup(0x4d04, &(0x7f0000000100)={0x0, 0x8987, 0x800, 0x2, 0xd8}, &(0x7f0000fea000/0x14000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x40200) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x2004, @fd=r2, 0x8000000000000001, 0x0, 0x0, 0x10, 0x2}, 0x7) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="18010000140001000004000000009acd9aced55251e6000002020008", @ANYRES32=0x0], 0x18}}, 0x0) (async) syz_io_uring_setup(0x4d04, &(0x7f0000000100)={0x0, 0x8987, 0x800, 0x2, 0xd8}, &(0x7f0000fea000/0x14000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) (async) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x40200) (async) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x2004, @fd=r2, 0x8000000000000001, 0x0, 0x0, 0x10, 0x2}, 0x7) (async) 15:29:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f00000000c0)) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0x1) 15:29:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0xff, 0x8, 0x8, 0x44, @loopback, @private1, 0x8000, 0x40, 0x6ba, 0xd7}}) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$NBD_DO_IT(r2, 0xab03) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0x39, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d825f00c4a00fd002dbd70000000000000000000", @ANYRES32=r1, @ANYBLOB="00200500010000000500210000000000b00018805000018008000100ff00000014000500fec1d9c938fa4ff107a23276afac723b05000600ea0000001400050092b8e4c8f244695773c67b0098003aa714000400201fe9fb355e5c19a4cc442d7d40ea9f3000018014000400794c5e11fe9b11c02a48241c9042598c0d0002006970365f7674693000000000080001000000000028000180080001000400000014000500c0a7d4453c4bff0933d36340b4dd5d0905000200000000000400018093deabb55a405db89ae3697bbbb8e086a1fe17dd6c23698128ef1fdd7d9ce502c9ec6fbf302ab6985d0c560037b9b31a53464009c09733e3b00c08b5dd3927465ed742385e354cc262738cdb060b2388f1b39c660bf0aadcc6d28a5cd58b7e522d34eb599c242c68066ac631081c97df61ade6505a8c19111d24ac1aa1bb13597555ec0a19ad6fe20de99c6755b5d0b69cfbdf832b7d77a4c2c47e2032e6d52f920be885606a1346093e2c138b5d36ae57e49abe0c3b4620ac4ed5ecd81be0eb51778107baf27ebc9a8298d4ef6b53ad800285cac428e804ee28d1f6b6a7f1fb794204a442"], 0xd8}}, 0x20040840) 15:29:23 executing program 4: r0 = socket(0x0, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x68, 0x14, 0x0, 0x0, 0x80000003, {0x2, 0x1f}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x4, 0x3f, 0x1}}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xa}}]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x1407, 0x800, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040800) 15:29:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f00000000c0)) (async) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0x1) 15:29:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x68, 0x14, 0x0, 0x0, 0x80000003, {0x2, 0x1f}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x4, 0x3f, 0x1}}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xa}}]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:23 executing program 1: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0xff, 0x8, 0x8, 0x44, @loopback, @private1, 0x8000, 0x40, 0x6ba, 0xd7}}) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$NBD_DO_IT(r2, 0xab03) (async) ioctl$NBD_DO_IT(r2, 0xab03) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0x39, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d825f00c4a00fd002dbd70000000000000000000", @ANYRES32=r1, @ANYBLOB="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"], 0xd8}}, 0x20040840) 15:29:23 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000000)=0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x50, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}, [@IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1c}}, @IFA_LABEL={0x14, 0x3, 'nicvf0\x00'}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LABEL={0x14, 0x3, 'caif0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 15:29:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x68, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x4, 0x3f, 0x1}}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xa}}]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="18010000140001000004000000009acd9aced55251e6000002020008", @ANYRES32=0x0], 0x18}}, 0x0) (async) syz_io_uring_setup(0x4d04, &(0x7f0000000100)={0x0, 0x8987, 0x800, 0x2, 0xd8}, &(0x7f0000fea000/0x14000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x40200) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x2004, @fd=r2, 0x8000000000000001, 0x0, 0x0, 0x10, 0x2}, 0x7) 15:29:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f00000000c0)) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0x1) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f00000000c0)) (async) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0x1) (async) 15:29:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0xff, 0x8, 0x8, 0x44, @loopback, @private1, 0x8000, 0x40, 0x6ba, 0xd7}}) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$NBD_DO_IT(r2, 0xab03) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0x39, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d825f00c4a00fd002dbd70000000000000000000", @ANYRES32=r1, @ANYBLOB="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"], 0xd8}}, 0x20040840) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0xff, 0x8, 0x8, 0x44, @loopback, @private1, 0x8000, 0x40, 0x6ba, 0xd7}}) (async) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) ioctl$NBD_DO_IT(r2, 0xab03) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0x39, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d825f00c4a00fd002dbd70000000000000000000", @ANYRES32=r1, @ANYBLOB="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"], 0xd8}}, 0x20040840) (async) 15:29:23 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000000)=0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x50, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}, [@IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1c}}, @IFA_LABEL={0x14, 0x3, 'nicvf0\x00'}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LABEL={0x14, 0x3, 'caif0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 15:29:23 executing program 4: r0 = socket(0x0, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x68, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x4, 0x3f, 0x1}}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xa}}]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc}, @GTPA_VERSION={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x90) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x70bd26}, 0x18}}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000011c0), 0x5, 0x402c0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000001340)={&(0x7f0000001200), &(0x7f0000001240)=""/228, 0xe4}) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$can_j1939(r2, &(0x7f0000001180)={&(0x7f0000000100)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x2}}, 0x18, &(0x7f0000001140)={&(0x7f0000000140)="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", 0x1000}, 0x1, 0x0, 0x0, 0x80}, 0x48041) 15:29:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000680)={0x53, 0x0, 0x6, 0x0, @scatter={0x8, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/34, 0x22}, {&(0x7f0000000080)=""/240, 0xf0}, {&(0x7f00000001c0)=""/94, 0x5e}, {&(0x7f0000000240)=""/28, 0x1c}, {&(0x7f0000000280)=""/19, 0x13}, {&(0x7f0000000340)=""/131, 0x83}, {&(0x7f0000000400)=""/250, 0xfa}, {&(0x7f0000000500)=""/228, 0xe4}]}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x2000000) 15:29:23 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000000)=0x3) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x50, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}, [@IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1c}}, @IFA_LABEL={0x14, 0x3, 'nicvf0\x00'}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LABEL={0x14, 0x3, 'caif0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 15:29:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x60, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x4, 0x3f, 0x1}}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc}, @GTPA_VERSION={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x90) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000680)={0x53, 0x0, 0x6, 0x0, @scatter={0x8, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/34, 0x22}, {&(0x7f0000000080)=""/240, 0xf0}, {&(0x7f00000001c0)=""/94, 0x5e}, {&(0x7f0000000240)=""/28, 0x1c}, {&(0x7f0000000280)=""/19, 0x13}, {&(0x7f0000000340)=""/131, 0x83}, {&(0x7f0000000400)=""/250, 0xfa}, {&(0x7f0000000500)=""/228, 0xe4}]}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x2000000) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000680)={0x53, 0x0, 0x6, 0x0, @scatter={0x8, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/34, 0x22}, {&(0x7f0000000080)=""/240, 0xf0}, {&(0x7f00000001c0)=""/94, 0x5e}, {&(0x7f0000000240)=""/28, 0x1c}, {&(0x7f0000000280)=""/19, 0x13}, {&(0x7f0000000340)=""/131, 0x83}, {&(0x7f0000000400)=""/250, 0xfa}, {&(0x7f0000000500)=""/228, 0xe4}]}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x2000000) (async) 15:29:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x70bd26}, 0x18}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x70bd26}, 0x18}}, 0x0) syz_open_dev$usbmon(&(0x7f00000011c0), 0x5, 0x402c0) (async) r1 = syz_open_dev$usbmon(&(0x7f00000011c0), 0x5, 0x402c0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000001340)={&(0x7f0000001200), &(0x7f0000001240)=""/228, 0xe4}) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$can_j1939(r2, &(0x7f0000001180)={&(0x7f0000000100)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x2}}, 0x18, &(0x7f0000001140)={&(0x7f0000000140)="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", 0x1000}, 0x1, 0x0, 0x0, 0x80}, 0x48041) 15:29:23 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) setns(r0, 0x10000000) r2 = syz_io_uring_setup(0x2e44, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x0, 0x4012, r2, 0x8000000) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x6000, @fd_index=0x5, 0xfffffffffffffffd, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/93, 0x5d}, {&(0x7f0000000140)=""/220, 0xdc}, {&(0x7f0000000240)=""/70, 0x46}, {&(0x7f00000002c0)=""/231, 0xe7}, {&(0x7f00000003c0)=""/97, 0x61}], 0x5, 0x0, 0x1}, 0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) socket$nl_route(0x10, 0x3, 0x0) 15:29:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x58, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x4, 0x3f, 0x1}}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:23 executing program 4: r0 = socket(0x1e, 0x0, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) (async, rerun: 64) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (rerun: 64) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc}, @GTPA_VERSION={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x90) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000680)={0x53, 0x0, 0x6, 0x0, @scatter={0x8, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/34, 0x22}, {&(0x7f0000000080)=""/240, 0xf0}, {&(0x7f00000001c0)=""/94, 0x5e}, {&(0x7f0000000240)=""/28, 0x1c}, {&(0x7f0000000280)=""/19, 0x13}, {&(0x7f0000000340)=""/131, 0x83}, {&(0x7f0000000400)=""/250, 0xfa}, {&(0x7f0000000500)=""/228, 0xe4}]}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x2000000) 15:29:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x70bd26}, 0x18}}, 0x0) syz_open_dev$usbmon(&(0x7f00000011c0), 0x5, 0x402c0) (async) r1 = syz_open_dev$usbmon(&(0x7f00000011c0), 0x5, 0x402c0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000001340)={&(0x7f0000001200), &(0x7f0000001240)=""/228, 0xe4}) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$can_j1939(r2, &(0x7f0000001180)={&(0x7f0000000100)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x2}}, 0x18, &(0x7f0000001140)={&(0x7f0000000140)="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", 0x1000}, 0x1, 0x0, 0x0, 0x80}, 0x48041) (async) sendmsg$can_j1939(r2, &(0x7f0000001180)={&(0x7f0000000100)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x2}}, 0x18, &(0x7f0000001140)={&(0x7f0000000140)="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", 0x1000}, 0x1, 0x0, 0x0, 0x80}, 0x48041) 15:29:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x44, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x4, 0x3f, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:23 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) setns(r0, 0x10000000) r2 = syz_io_uring_setup(0x2e44, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x0, 0x4012, r2, 0x8000000) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x6000, @fd_index=0x5, 0xfffffffffffffffd, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/93, 0x5d}, {&(0x7f0000000140)=""/220, 0xdc}, {&(0x7f0000000240)=""/70, 0x46}, {&(0x7f00000002c0)=""/231, 0xe7}, {&(0x7f00000003c0)=""/97, 0x61}], 0x5, 0x0, 0x1}, 0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) setns(r0, 0x10000000) (async) syz_io_uring_setup(0x2e44, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x0, 0x4012, r2, 0x8000000) (async) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x6000, @fd_index=0x5, 0xfffffffffffffffd, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/93, 0x5d}, {&(0x7f0000000140)=""/220, 0xdc}, {&(0x7f0000000240)=""/70, 0x46}, {&(0x7f00000002c0)=""/231, 0xe7}, {&(0x7f00000003c0)=""/97, 0x61}], 0x5, 0x0, 0x1}, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) (async) socket$nl_route(0x10, 0x3, 0x0) (async) 15:29:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000007d61a17fd3972fa8000000000000000000", @ANYRES32=r0], 0x18}}, 0x0) 15:29:23 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='rpc_clnt_new\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1300000014000100000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 15:29:23 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00002abd8b00fcdbdf2d31090000000099b2da932d987d674a5a680000090000006400000000000000a7772200000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004800}, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:23 executing program 4: r0 = socket(0x1e, 0x0, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x44, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x4, 0x3f, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:23 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00002abd8b00fcdbdf2d31090000000099b2da932d987d674a5a680000090000006400000000000000a7772200000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004800}, 0x1) (async) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x44, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x4, 0x3f, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000007d61a17fd3972fa8000000000000000000", @ANYRES32=r0], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000007d61a17fd3972fa8000000000000000000", @ANYRES32=r0], 0x18}}, 0x0) (async) 15:29:23 executing program 4: r0 = socket(0x1e, 0x0, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:23 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='rpc_clnt_new\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1300000014000100000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 15:29:23 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) setns(r0, 0x10000000) (async) r2 = syz_io_uring_setup(0x2e44, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x0, 0x4012, r2, 0x8000000) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x6000, @fd_index=0x5, 0xfffffffffffffffd, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/93, 0x5d}, {&(0x7f0000000140)=""/220, 0xdc}, {&(0x7f0000000240)=""/70, 0x46}, {&(0x7f00000002c0)=""/231, 0xe7}, {&(0x7f00000003c0)=""/97, 0x61}], 0x5, 0x0, 0x1}, 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) (async) socket$nl_route(0x10, 0x3, 0x0) 15:29:23 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00002abd8b00fcdbdf2d31090000000099b2da932d987d674a5a680000090000006400000000000000a7772200000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004800}, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000007d61a17fd3972fa8000000000000000000", @ANYRES32=r0], 0x18}}, 0x0) 15:29:23 executing program 4: socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:23 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='rpc_clnt_new\x00'}, 0x10) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1300000014000100000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) 15:29:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x44, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:23 executing program 3: ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x8001) syz_open_dev$sg(&(0x7f0000000040), 0x4, 0x8c1) 15:29:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000014000102000000", @ANYRES32=0x0], 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x404c810) 15:29:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800002000"/20, @ANYRES32=0x0], 0x18}}, 0x0) 15:29:24 executing program 4: socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000140001000000000000000000023800009e24b1296490139b27a6d07f87457494", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x44, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:24 executing program 3: ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x8001) syz_open_dev$sg(&(0x7f0000000040), 0x4, 0x8c1) 15:29:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000014000102000000", @ANYRES32=0x0], 0x18}}, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x404c810) 15:29:24 executing program 4: socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800002000"/20, @ANYRES32=0x0], 0x18}}, 0x0) 15:29:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000140001000000000000000000023800009e24b1296490139b27a6d07f87457494", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:24 executing program 3: ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x8001) syz_open_dev$sg(&(0x7f0000000040), 0x4, 0x8c1) 15:29:24 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, 0x0, 0x120) 15:29:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x44, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800002000"/20, @ANYRES32=0x0], 0x18}}, 0x0) 15:29:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000014000102000000", @ANYRES32=0x0], 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x404c810) (async) sendmsg$FOU_CMD_GET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x404c810) 15:29:24 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0) read$qrtrtun(r0, &(0x7f00000001c0)=""/244, 0xf4) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) times(&(0x7f0000000100)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xe3, &(0x7f00000002c0)=""/227}, &(0x7f0000000180)="b472b4451634", 0x0, 0x0, 0x10010, 0x3, 0x0}) 15:29:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000140001000000000000000000023800009e24b1296490139b27a6d07f87457494", @ANYRES32=0x0], 0x18}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000140001000000000000000000023800009e24b1296490139b27a6d07f87457494", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x58, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x4, 0x3f, 0x1}}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:24 executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0xff, 0xff, 0x4, 0x0, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7800, 0x7, 0x7, 0xf8}}) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x110, r2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@dellinkprop={0x48, 0x6d, 0x20, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, 0x8010, 0x230a8}, [@IFLA_EXT_MASK={0x8}, @IFLA_PHYS_SWITCH_ID={0x15, 0x24, "5d0391220df07dd037ff6f26e0a9dcbb39"}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x48}}, 0x0) 15:29:24 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, 0x0, 0x120) 15:29:24 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0) (async) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0) read$qrtrtun(r0, &(0x7f00000001c0)=""/244, 0xf4) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) times(&(0x7f0000000100)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xe3, &(0x7f00000002c0)=""/227}, &(0x7f0000000180)="b472b4451634", 0x0, 0x0, 0x10010, 0x3, 0x0}) 15:29:24 executing program 1: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xfd79, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b435dc2ea", @ANYRES32=0x0], 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250000000008000100", @ANYRES32=r1, @ANYBLOB="080004000a01010108000500ffffff08000400e0000001080008000200000008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\t\x00\x00\x00\x00\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0xc080) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) 15:29:24 executing program 2: syz_open_dev$sg(&(0x7f0000000100), 0x7, 0x488200) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101c80, 0x94) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000140000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x58, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x0, 0x3f, 0x1}}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:24 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, 0x0, 0x120) 15:29:24 executing program 2: syz_open_dev$sg(&(0x7f0000000100), 0x7, 0x488200) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101c80, 0x94) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000140000", @ANYRES32=0x0], 0x18}}, 0x0) (rerun: 32) 15:29:24 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0) read$qrtrtun(r0, &(0x7f00000001c0)=""/244, 0xf4) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) times(&(0x7f0000000100)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xe3, &(0x7f00000002c0)=""/227}, &(0x7f0000000180)="b472b4451634", 0x0, 0x0, 0x10010, 0x3, 0x0}) syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0) (async) read$qrtrtun(r0, &(0x7f00000001c0)=""/244, 0xf4) (async) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) times(&(0x7f0000000100)) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xe3, &(0x7f00000002c0)=""/227}, &(0x7f0000000180)="b472b4451634", 0x0, 0x0, 0x10010, 0x3, 0x0}) (async) 15:29:24 executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0xff, 0xff, 0x4, 0x0, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7800, 0x7, 0x7, 0xf8}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0xff, 0xff, 0x4, 0x0, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7800, 0x7, 0x7, 0xf8}}) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x110, r2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@dellinkprop={0x48, 0x6d, 0x20, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, 0x8010, 0x230a8}, [@IFLA_EXT_MASK={0x8}, @IFLA_PHYS_SWITCH_ID={0x15, 0x24, "5d0391220df07dd037ff6f26e0a9dcbb39"}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x48}}, 0x0) 15:29:24 executing program 1: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xfd79, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b435dc2ea", @ANYRES32=0x0], 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250000000008000100", @ANYRES32=r1, @ANYBLOB="080004000a01010108000500ffffff08000400e0000001080008000200000008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\t\x00\x00\x00\x00\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0xc080) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xfd79, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b435dc2ea", @ANYRES32=0x0], 0x18}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250000000008000100", @ANYRES32=r1, @ANYBLOB="080004000a01010108000500ffffff08000400e0000001080008000200000008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\t\x00\x00\x00\x00\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0xc080) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) (async) 15:29:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x58, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x0, 0x0, 0x1}}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:24 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:24 executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0xff, 0xff, 0x4, 0x0, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7800, 0x7, 0x7, 0xf8}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0xff, 0xff, 0x4, 0x0, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7800, 0x7, 0x7, 0xf8}}) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x110, r2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@dellinkprop={0x48, 0x6d, 0x20, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, 0x8010, 0x230a8}, [@IFLA_EXT_MASK={0x8}, @IFLA_PHYS_SWITCH_ID={0x15, 0x24, "5d0391220df07dd037ff6f26e0a9dcbb39"}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x48}}, 0x0) 15:29:24 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="ca0000000400000075000000b6781d1a70d37cc3f6cd02eb79a644d167a04c3da8afc6f4c6f4f894b12afe6ce039f52f912ed97c92d88ed4686a841ef4f7311045e78d1089372708e7748b4bd2836482f2c76a9b2781a4b0d85da007c03fd1b7f6213c18c19f20e898179b28b5975f4767d422f638b2af16a1ae2103656acfd2cc97196295c6df3877f4656a94e1c8a6f2a8f87372b726b979a29d99fb2ca8531d8b86b481f572c949edd577acd24a223ae50d31505e67f0a19e835c5f762770d442073f88548e2400cae1e2c7110e242b4d"]) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SG_BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:24 executing program 2: syz_open_dev$sg(&(0x7f0000000100), 0x7, 0x488200) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101c80, 0x94) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000140000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x58, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_CACHEINFO={0x14}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:24 executing program 1: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xfd79, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b435dc2ea", @ANYRES32=0x0], 0x18}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xfd79, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b435dc2ea", @ANYRES32=0x0], 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250000000008000100", @ANYRES32=r1, @ANYBLOB="080004000a01010108000500ffffff08000400e0000001080008000200000008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\t\x00\x00\x00\x00\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0xc080) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) (async) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) 15:29:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000014ffffffff000000fdffffff02380000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x50, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_CACHEINFO={0x14}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='cachefiles_mark_failed\x00'}, 0x10) [ 2316.026920][T11120] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:29:24 executing program 1: statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xb3d2f8681e79705f, 0x400, &(0x7f0000000280)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0x1, 0xd00) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_newrule={0x34, 0x20, 0x400, 0x70bd2d, 0x25dfdbfe, {0x2, 0x0, 0x20, 0xaf, 0xc0, 0x0, 0x0, 0x1, 0x1}, [@FRA_SRC={0x8, 0x2, @local}, @FRA_SRC={0x8, 0x2, @rand_addr=0x64010102}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800000014d2010000000072f4051a39255fad3be1051611319b37000a159173cb3e82", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:24 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="ca0000000400000075000000b6781d1a70d37cc3f6cd02eb79a644d167a04c3da8afc6f4c6f4f894b12afe6ce039f52f912ed97c92d88ed4686a841ef4f7311045e78d1089372708e7748b4bd2836482f2c76a9b2781a4b0d85da007c03fd1b7f6213c18c19f20e898179b28b5975f4767d422f638b2af16a1ae2103656acfd2cc97196295c6df3877f4656a94e1c8a6f2a8f87372b726b979a29d99fb2ca8531d8b86b481f572c949edd577acd24a223ae50d31505e67f0a19e835c5f762770d442073f88548e2400cae1e2c7110e242b4d"]) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SG_BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) (async) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="ca0000000400000075000000b6781d1a70d37cc3f6cd02eb79a644d167a04c3da8afc6f4c6f4f894b12afe6ce039f52f912ed97c92d88ed4686a841ef4f7311045e78d1089372708e7748b4bd2836482f2c76a9b2781a4b0d85da007c03fd1b7f6213c18c19f20e898179b28b5975f4767d422f638b2af16a1ae2103656acfd2cc97196295c6df3877f4656a94e1c8a6f2a8f87372b726b979a29d99fb2ca8531d8b86b481f572c949edd577acd24a223ae50d31505e67f0a19e835c5f762770d442073f88548e2400cae1e2c7110e242b4d"]) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$SG_BLKTRACETEARDOWN(r1, 0x1276, 0x0) (async) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 15:29:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000014ffffffff000000fdffffff02380000", @ANYRES32=0x0], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000014ffffffff000000fdffffff02380000", @ANYRES32=0x0], 0x18}}, 0x0) (async) [ 2316.181959][T11133] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:29:25 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x120) 15:29:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x48, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_CACHEINFO={0x14}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:25 executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='cachefiles_mark_failed\x00'}, 0x10) 15:29:25 executing program 1: statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xb3d2f8681e79705f, 0x400, &(0x7f0000000280)) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0x1, 0xd00) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_newrule={0x34, 0x20, 0x400, 0x70bd2d, 0x25dfdbfe, {0x2, 0x0, 0x20, 0xaf, 0xc0, 0x0, 0x0, 0x1, 0x1}, [@FRA_SRC={0x8, 0x2, @local}, @FRA_SRC={0x8, 0x2, @rand_addr=0x64010102}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800000014d2010000000072f4051a39255fad3be1051611319b37000a159173cb3e82", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000014ffffffff000000fdffffff02380000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="ca0000000400000075000000b6781d1a70d37cc3f6cd02eb79a644d167a04c3da8afc6f4c6f4f894b12afe6ce039f52f912ed97c92d88ed4686a841ef4f7311045e78d1089372708e7748b4bd2836482f2c76a9b2781a4b0d85da007c03fd1b7f6213c18c19f20e898179b28b5975f4767d422f638b2af16a1ae2103656acfd2cc97196295c6df3877f4656a94e1c8a6f2a8f87372b726b979a29d99fb2ca8531d8b86b481f572c949edd577acd24a223ae50d31505e67f0a19e835c5f762770d442073f88548e2400cae1e2c7110e242b4d"]) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SG_BLKTRACETEARDOWN(r1, 0x1276, 0x0) (async) ioctl$SG_BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:25 executing program 1: statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xb3d2f8681e79705f, 0x400, &(0x7f0000000280)) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0x1, 0xd00) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_newrule={0x34, 0x20, 0x400, 0x70bd2d, 0x25dfdbfe, {0x2, 0x0, 0x20, 0xaf, 0xc0, 0x0, 0x0, 0x1, 0x1}, [@FRA_SRC={0x8, 0x2, @local}, @FRA_SRC={0x8, 0x2, @rand_addr=0x64010102}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800000014d2010000000072f4051a39255fad3be1051611319b37000a159173cb3e82", @ANYRES32=0x0], 0x18}}, 0x0) (rerun: 32) 15:29:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='cachefiles_mark_failed\x00'}, 0x10) 15:29:25 executing program 2: r0 = open$dir(&(0x7f0000000100)='./file0/file0\x00', 0x50040, 0x144) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 15:29:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x40, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_CACHEINFO={0x14}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x0) [ 2316.854943][T11152] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:29:25 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x120) 15:29:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x4}, 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 15:29:25 executing program 2: r0 = open$dir(&(0x7f0000000100)='./file0/file0\x00', 0x50040, 0x144) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) open$dir(&(0x7f0000000100)='./file0/file0\x00', 0x50040, 0x144) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1}, 0x6) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) 15:29:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18120000", @ANYRES32=r1, @ANYBLOB="00000000000000001853000006000000000000000000a54afafb0000fbfffeff"], &(0x7f00000001c0)='GPL\x00', 0x10001, 0x44, &(0x7f0000000200)=""/68, 0x40f00, 0xf, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000280)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0xd, 0x1, 0x1}, 0x10}, 0x80) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xa, &(0x7f0000000440)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x29}, @exit, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x8}, @generic={0x2b, 0xe, 0x9, 0x7fff, 0x7}], &(0x7f0000000500)='syzkaller\x00', 0xffff, 0xad, &(0x7f0000000540)=""/173, 0x40f00, 0x4, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000600)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0xc, 0x100, 0xd68}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r2, r1]}, 0x80) r6 = syz_open_dev$vcsn(&(0x7f0000000780), 0x263a, 0x40800) r7 = syz_open_dev$vcsn(&(0x7f0000000100), 0x4e, 0x200) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r7, 0xc00464be, &(0x7f0000000800)={0x2}) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r5, 0x400, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$SCSI_IOCTL_GET_IDLUN(r6, 0x5382, &(0x7f00000007c0)) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000080)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x40, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_CACHEINFO={0x14}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}]}, 0x40}}, 0x0) 15:29:25 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x120) 15:29:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) (async, rerun: 64) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (rerun: 64) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18120000", @ANYRES32=r1, @ANYBLOB="00000000000000001853000006000000000000000000a54afafb0000fbfffeff"], &(0x7f00000001c0)='GPL\x00', 0x10001, 0x44, &(0x7f0000000200)=""/68, 0x40f00, 0xf, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000280)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0xd, 0x1, 0x1}, 0x10}, 0x80) (rerun: 64) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async, rerun: 32) ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) (rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xa, &(0x7f0000000440)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x29}, @exit, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x8}, @generic={0x2b, 0xe, 0x9, 0x7fff, 0x7}], &(0x7f0000000500)='syzkaller\x00', 0xffff, 0xad, &(0x7f0000000540)=""/173, 0x40f00, 0x4, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000600)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0xc, 0x100, 0xd68}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r2, r1]}, 0x80) r6 = syz_open_dev$vcsn(&(0x7f0000000780), 0x263a, 0x40800) (async, rerun: 64) r7 = syz_open_dev$vcsn(&(0x7f0000000100), 0x4e, 0x200) (rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r7, 0xc00464be, &(0x7f0000000800)={0x2}) (async) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r5, 0x400, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async) ioctl$SCSI_IOCTL_GET_IDLUN(r6, 0x5382, &(0x7f00000007c0)) (async, rerun: 64) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000080)) (async, rerun: 64) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x4}, 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 15:29:25 executing program 5: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x120) 15:29:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000014070000000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x26d4df579eaab507}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x20, 0x40, 0xfc, 0x0, 0x0, 0x9, 0x400}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x800) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x6c, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2b}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2400c8d0}, 0x800) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x78, 0x68, 0x2, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x2, 0x0, 0xa}, [@NHA_GROUP={0xc, 0x2, [{0x0, 0x1}]}, @NHA_GROUP={0xc, 0x2, [{0x2, 0x5f}]}, @NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010102}, @NHA_GROUP={0x2c, 0x2, [{0x1, 0x5}, {0x0, 0x7f}, {0x2, 0xff}, {0x1, 0xdf}, {0x2, 0x5}]}, @NHA_OIF={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000040) 15:29:25 executing program 2: r0 = open$dir(&(0x7f0000000100)='./file0/file0\x00', 0x50040, 0x144) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 15:29:25 executing program 5: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x120) 15:29:25 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}], 0x6}, 0x120) 15:29:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x4}, 0x18}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 15:29:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000014070000000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x26d4df579eaab507}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x20, 0x40, 0xfc, 0x0, 0x0, 0x9, 0x400}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x800) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x6c, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2b}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2400c8d0}, 0x800) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x78, 0x68, 0x2, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x2, 0x0, 0xa}, [@NHA_GROUP={0xc, 0x2, [{0x0, 0x1}]}, @NHA_GROUP={0xc, 0x2, [{0x2, 0x5f}]}, @NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010102}, @NHA_GROUP={0x2c, 0x2, [{0x1, 0x5}, {0x0, 0x7f}, {0x2, 0xff}, {0x1, 0xdf}, {0x2, 0x5}]}, @NHA_OIF={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000040) 15:29:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x1402, 0x200, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x840}, 0x577418dc1f1450d6) 15:29:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="18001200"/18, @ANYRES64=r0], 0x18}}, 0x800) 15:29:25 executing program 5: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x120) 15:29:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) (async) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18120000", @ANYRES32=r1, @ANYBLOB="00000000000000001853000006000000000000000000a54afafb0000fbfffeff"], &(0x7f00000001c0)='GPL\x00', 0x10001, 0x44, &(0x7f0000000200)=""/68, 0x40f00, 0xf, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000280)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0xd, 0x1, 0x1}, 0x10}, 0x80) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r4) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xa, &(0x7f0000000440)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x29}, @exit, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x8}, @generic={0x2b, 0xe, 0x9, 0x7fff, 0x7}], &(0x7f0000000500)='syzkaller\x00', 0xffff, 0xad, &(0x7f0000000540)=""/173, 0x40f00, 0x4, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000600)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0xc, 0x100, 0xd68}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r2, r1]}, 0x80) r6 = syz_open_dev$vcsn(&(0x7f0000000780), 0x263a, 0x40800) syz_open_dev$vcsn(&(0x7f0000000100), 0x4e, 0x200) (async) r7 = syz_open_dev$vcsn(&(0x7f0000000100), 0x4e, 0x200) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r7, 0xc00464be, &(0x7f0000000800)={0x2}) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r5, 0x400, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$SCSI_IOCTL_GET_IDLUN(r6, 0x5382, &(0x7f00000007c0)) (async) ioctl$SCSI_IOCTL_GET_IDLUN(r6, 0x5382, &(0x7f00000007c0)) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000080)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000014070000000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x26d4df579eaab507}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x20, 0x40, 0xfc, 0x0, 0x0, 0x9, 0x400}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x800) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x26d4df579eaab507}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x20, 0x40, 0xfc, 0x0, 0x0, 0x9, 0x400}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x800) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x6c, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2b}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2400c8d0}, 0x800) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x78, 0x68, 0x2, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x2, 0x0, 0xa}, [@NHA_GROUP={0xc, 0x2, [{0x0, 0x1}]}, @NHA_GROUP={0xc, 0x2, [{0x2, 0x5f}]}, @NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010102}, @NHA_GROUP={0x2c, 0x2, [{0x1, 0x5}, {0x0, 0x7f}, {0x2, 0xff}, {0x1, 0xdf}, {0x2, 0x5}]}, @NHA_OIF={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000040) 15:29:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="18001200"/18, @ANYRES64=r0], 0x18}}, 0x800) 15:29:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x1402, 0x200, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x840}, 0x577418dc1f1450d6) 15:29:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x31}}, 0x18}}, 0x0) 15:29:25 executing program 5: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x120) 15:29:26 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}], 0x5}, 0x120) 15:29:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="18001200"/18, @ANYRES64=r0], 0x18}}, 0x800) 15:29:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x1402, 0x200, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x840}, 0x577418dc1f1450d6) 15:29:26 executing program 5: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x120) 15:29:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), 0x4) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x31}}, 0x18}}, 0x0) 15:29:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0xffffffffffffffff, 0x400800) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000080)) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000000c0)) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x1000000000000, 0x4800) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xe2, &(0x7f0000001340)=""/226}, &(0x7f0000000100)="a4f33c451634", 0x0, 0x2, 0x3, 0x0, 0x0}) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x1) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) 15:29:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="7a7ecd22a374b8c7ada8627ebdb01800000014000100000000000000000002380000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="e2c52871156350c51a82d3b6b13b511d183c29eebba39834962dc9d26d00e397360645bd0100"/52, @ANYRES32=0x0], 0x18}}, 0x0) 15:29:26 executing program 5: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x120) 15:29:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0xffffffffffffffff, 0x400800) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000080)) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000000c0)) (async) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x1000000000000, 0x4800) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xe2, &(0x7f0000001340)=""/226}, &(0x7f0000000100)="a4f33c451634", 0x0, 0x2, 0x3, 0x0, 0x0}) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x1) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) 15:29:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x31}}, 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), 0x4) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x31}}, 0x18}}, 0x0) (async) 15:29:26 executing program 2: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="7a7ecd22a374b8c7ada8627ebdb01800000014000100000000000000000002380000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:27 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x4}, 0x120) 15:29:27 executing program 5: r0 = socket(0x0, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x120) 15:29:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="e2c52871156350c51a82d3b6b13b511d183c29eebba39834962dc9d26d00e397360645bd0100"/52, @ANYRES32=0x0], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="e2c52871156350c51a82d3b6b13b511d183c29eebba39834962dc9d26d00e397360645bd0100"/52, @ANYRES32=0x0], 0x18}}, 0x0) (async) 15:29:27 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0xffffffffffffffff, 0x400800) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000080)) (async) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000000c0)) (async) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x1000000000000, 0x4800) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xe2, &(0x7f0000001340)=""/226}, &(0x7f0000000100)="a4f33c451634", 0x0, 0x2, 0x3, 0x0, 0x0}) (async, rerun: 32) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x1) (async) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) 15:29:27 executing program 1: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) openat$incfs(r0, &(0x7f0000000140)='.pending_reads\x00', 0x202, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="7a7ecd22a374b8c7ada8627ebdb01800000014000100000000000000000002380000", @ANYRES32=0x0], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="7a7ecd22a374b8c7ada8627ebdb01800000014000100000000000000000002380000", @ANYRES32=0x0], 0x18}}, 0x0) (async) 15:29:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newnexthop={0x54, 0x68, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x2}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG={0x8}}}, @NHA_GROUP={0x24, 0x2, [{0x0, 0x1}, {0x2, 0x40}, {0x2, 0xd7}, {0x1, 0x4}]}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x1) 15:29:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="e2c52871156350c51a82d3b6b13b511d183c29eebba39834962dc9d26d00e397360645bd0100"/52, @ANYRES32=0x0], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="e2c52871156350c51a82d3b6b13b511d183c29eebba39834962dc9d26d00e397360645bd0100"/52, @ANYRES32=0x0], 0x18}}, 0x0) (async) 15:29:27 executing program 1: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) openat$incfs(r0, &(0x7f0000000140)='.pending_reads\x00', 0x202, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) (async) openat$incfs(r0, &(0x7f0000000140)='.pending_reads\x00', 0x202, 0xe) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) 15:29:27 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x4, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c34", 0x0, 0x0, 0x3, 0x0, 0x0}) 15:29:27 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000014000100000000000000000002000000ba7d987398e2e3895ff31432b5aa2e26145c918ad62c39f0cbb71f56dc304163196e211137a1452e295a8b10ee0497e67d4a306f83edd5bba7c82288238dbe3b7755098ea04b77e2cb61de3183", @ANYRES32=0x0, @ANYRES16=r1, @ANYRESOCT=r0], 0x18}}, 0x0) setns(0xffffffffffffffff, 0x20000) 15:29:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) (async, rerun: 64) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newnexthop={0x54, 0x68, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x2}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG={0x8}}}, @NHA_GROUP={0x24, 0x2, [{0x0, 0x1}, {0x2, 0x40}, {0x2, 0xd7}, {0x1, 0x4}]}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x1) 15:29:28 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}], 0x3}, 0x120) 15:29:28 executing program 1: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) openat$incfs(r0, &(0x7f0000000140)='.pending_reads\x00', 0x202, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:28 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000014000100000000000000000002000000ba7d987398e2e3895ff31432b5aa2e26145c918ad62c39f0cbb71f56dc304163196e211137a1452e295a8b10ee0497e67d4a306f83edd5bba7c82288238dbe3b7755098ea04b77e2cb61de3183", @ANYRES32=0x0, @ANYRES16=r1, @ANYRESOCT=r0], 0x18}}, 0x0) (async) setns(0xffffffffffffffff, 0x20000) 15:29:28 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x4, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c34", 0x0, 0x0, 0x3, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x4, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c34", 0x0, 0x0, 0x3, 0x0, 0x0}) (async) 15:29:28 executing program 5: r0 = socket(0x0, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x120) 15:29:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newnexthop={0x54, 0x68, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x2}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG={0x8}}}, @NHA_GROUP={0x24, 0x2, [{0x0, 0x1}, {0x2, 0x40}, {0x2, 0xd7}, {0x1, 0x4}]}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x1) 15:29:28 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x4, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c34", 0x0, 0x0, 0x3, 0x0, 0x0}) 15:29:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0xff}}, 0x18}, 0x1, 0x0, 0x0, 0x448c4}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) r3 = openat$incfs(r1, &(0x7f0000000200)='.log\x00', 0x0, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r5 = openat$incfs(r2, &(0x7f0000000440)='.pending_reads\x00', 0x80080, 0x32) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x11, 0x7, 0xffff, 0x4, 0x1800, r3, 0xfe000000, '\x00', r4, r5, 0x4, 0x5, 0x3}, 0x48) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) fanotify_mark(r2, 0x10, 0x8000000, 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') 15:29:28 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000014000100000000000000000002000000ba7d987398e2e3895ff31432b5aa2e26145c918ad62c39f0cbb71f56dc304163196e211137a1452e295a8b10ee0497e67d4a306f83edd5bba7c82288238dbe3b7755098ea04b77e2cb61de3183", @ANYRES32=0x0, @ANYRES16=r1, @ANYRESOCT=r0], 0x18}}, 0x0) setns(0xffffffffffffffff, 0x20000) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000014000100000000000000000002000000ba7d987398e2e3895ff31432b5aa2e26145c918ad62c39f0cbb71f56dc304163196e211137a1452e295a8b10ee0497e67d4a306f83edd5bba7c82288238dbe3b7755098ea04b77e2cb61de3183", @ANYRES32=0x0, @ANYRES16=r1, @ANYRESOCT=r0], 0x18}}, 0x0) (async) setns(0xffffffffffffffff, 0x20000) (async) 15:29:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x10c, 0x10, 0x100, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x28008}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x596dc}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @IFLA_GROUP={0x8, 0x1b, 0x26}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_VF_PORTS={0xb8, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x7ff}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xe, 0x2, 'z(^:\\]&.[\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x9, 0x2, '%){%\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xeb1}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "c9ccc853b568dcbdf9df80fe5ae40b34"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b41f2248e6708d5f307c998096c2da39"}, @IFLA_PORT_PROFILE={0xa, 0x2, '\\#1@\b\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "cf98b780a4e1dee079c4a7d943031236"}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xcc}]}]}, @IFLA_OPERSTATE={0x5, 0x10, 0x1}, @IFLA_MASTER={0x8}]}, 0x10c}, 0x1, 0x0, 0x0, 0x24004880}, 0x20000000) 15:29:28 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x103002, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0xab3, 0x8, 0x4, 0x0, 0xa0e, {}, {0x4, 0x0, 0xff, 0x3f, 0x30, 0x2, "07b9764b"}, 0xffffac3b, 0x4, {}, 0xffff, 0x0, r2}) 15:29:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x10c, 0x10, 0x100, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x28008}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x596dc}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @IFLA_GROUP={0x8, 0x1b, 0x26}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_VF_PORTS={0xb8, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x7ff}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xe, 0x2, 'z(^:\\]&.[\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x9, 0x2, '%){%\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xeb1}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "c9ccc853b568dcbdf9df80fe5ae40b34"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b41f2248e6708d5f307c998096c2da39"}, @IFLA_PORT_PROFILE={0xa, 0x2, '\\#1@\b\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "cf98b780a4e1dee079c4a7d943031236"}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xcc}]}]}, @IFLA_OPERSTATE={0x5, 0x10, 0x1}, @IFLA_MASTER={0x8}]}, 0x10c}, 0x1, 0x0, 0x0, 0x24004880}, 0x20000000) 15:29:29 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}], 0x2}, 0x120) 15:29:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0xff}}, 0x18}, 0x1, 0x0, 0x0, 0x448c4}, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) r3 = openat$incfs(r1, &(0x7f0000000200)='.log\x00', 0x0, 0x8) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (async) r5 = openat$incfs(r2, &(0x7f0000000440)='.pending_reads\x00', 0x80080, 0x32) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x11, 0x7, 0xffff, 0x4, 0x1800, r3, 0xfe000000, '\x00', r4, r5, 0x4, 0x5, 0x3}, 0x48) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) fanotify_mark(r2, 0x10, 0x8000000, 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') 15:29:29 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x103002, 0x0) (rerun: 32) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0xab3, 0x8, 0x4, 0x0, 0xa0e, {}, {0x4, 0x0, 0xff, 0x3f, 0x30, 0x2, "07b9764b"}, 0xffffac3b, 0x4, {}, 0xffff, 0x0, r2}) 15:29:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x6d, 0x1, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, 0x40, 0x80, 0x10001, 0x8}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x1000)=nil, 0x1000, &(0x7f00000001c0)='i\xa9!\xd5& ]{#\x8c\a.\x8a\xe4\x92\xcb\x03{`a_\xe3*^\x7f\xcc\xec\x1be\xd3\xb6\xd1') sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_newvlan={0x40, 0x70, 0x300, 0x70bd29, 0x25dfdbfb, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xd}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x20, 0x2}}}]}, 0x40}}, 0x0) 15:29:29 executing program 5: r0 = socket(0x0, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x120) 15:29:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x10c, 0x10, 0x100, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x28008}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x596dc}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @IFLA_GROUP={0x8, 0x1b, 0x26}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_VF_PORTS={0xb8, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x7ff}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xe, 0x2, 'z(^:\\]&.[\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x9, 0x2, '%){%\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xeb1}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "c9ccc853b568dcbdf9df80fe5ae40b34"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b41f2248e6708d5f307c998096c2da39"}, @IFLA_PORT_PROFILE={0xa, 0x2, '\\#1@\b\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "cf98b780a4e1dee079c4a7d943031236"}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xcc}]}]}, @IFLA_OPERSTATE={0x5, 0x10, 0x1}, @IFLA_MASTER={0x8}]}, 0x10c}, 0x1, 0x0, 0x0, 0x24004880}, 0x20000000) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x10c, 0x10, 0x100, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x28008}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x596dc}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @IFLA_GROUP={0x8, 0x1b, 0x26}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_VF_PORTS={0xb8, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x7ff}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xe, 0x2, 'z(^:\\]&.[\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x9, 0x2, '%){%\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xeb1}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "c9ccc853b568dcbdf9df80fe5ae40b34"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b41f2248e6708d5f307c998096c2da39"}, @IFLA_PORT_PROFILE={0xa, 0x2, '\\#1@\b\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "cf98b780a4e1dee079c4a7d943031236"}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xcc}]}]}, @IFLA_OPERSTATE={0x5, 0x10, 0x1}, @IFLA_MASTER={0x8}]}, 0x10c}, 0x1, 0x0, 0x0, 0x24004880}, 0x20000000) 15:29:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x6d, 0x1, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, 0x40, 0x80, 0x10001, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x6d, 0x1, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, 0x40, 0x80, 0x10001, 0x8}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x1000)=nil, 0x1000, &(0x7f00000001c0)='i\xa9!\xd5& ]{#\x8c\a.\x8a\xe4\x92\xcb\x03{`a_\xe3*^\x7f\xcc\xec\x1be\xd3\xb6\xd1') sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_newvlan={0x40, 0x70, 0x300, 0x70bd29, 0x25dfdbfb, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xd}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x20, 0x2}}}]}, 0x40}}, 0x0) 15:29:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0xff}}, 0x18}, 0x1, 0x0, 0x0, 0x448c4}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) (rerun: 32) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) r3 = openat$incfs(r1, &(0x7f0000000200)='.log\x00', 0x0, 0x8) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (rerun: 32) r5 = openat$incfs(r2, &(0x7f0000000440)='.pending_reads\x00', 0x80080, 0x32) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x11, 0x7, 0xffff, 0x4, 0x1800, r3, 0xfe000000, '\x00', r4, r5, 0x4, 0x5, 0x3}, 0x48) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) fanotify_mark(r2, 0x10, 0x8000000, 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') (rerun: 32) 15:29:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x50, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x94}, @IFA_CACHEINFO={0x14}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15:29:29 executing program 2: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xfd79, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b435dc2ea", @ANYRES32=0x0], 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250000000008000100", @ANYRES32=r1, @ANYBLOB="080004000a01010108000500ffffff08000400e0000001080008000200000008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\t\x00\x00\x00\x00\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0xc080) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) 15:29:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x6d, 0x1, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, 0x40, 0x80, 0x10001, 0x8}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x1000)=nil, 0x1000, &(0x7f00000001c0)='i\xa9!\xd5& ]{#\x8c\a.\x8a\xe4\x92\xcb\x03{`a_\xe3*^\x7f\xcc\xec\x1be\xd3\xb6\xd1') sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_newvlan={0x40, 0x70, 0x300, 0x70bd29, 0x25dfdbfb, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xd}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x20, 0x2}}}]}, 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x6d, 0x1, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, 0x40, 0x80, 0x10001, 0x8}}) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x1000)=nil, 0x1000, &(0x7f00000001c0)='i\xa9!\xd5& ]{#\x8c\a.\x8a\xe4\x92\xcb\x03{`a_\xe3*^\x7f\xcc\xec\x1be\xd3\xb6\xd1') (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_newvlan={0x40, 0x70, 0x300, 0x70bd29, 0x25dfdbfb, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xd}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x20, 0x2}}}]}, 0x40}}, 0x0) (async) 15:29:29 executing program 5: r0 = socket(0x1e, 0x0, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x120) 15:29:30 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}], 0x1}, 0x120) 15:29:30 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@mpls_delroute={0x154, 0x19, 0x1, 0x70bd25, 0x25dfdbfb, {0x1c, 0x24, 0x20, 0x0, 0xff, 0x2, 0xfe, 0x3, 0x100}, [@RTA_MULTIPATH={0xc, 0x9, {0xfffd, 0x0, 0x24}}, @RTA_NEWDST={0x84, 0x13, [{0x1ff, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x5d5}, {0x4}, {0xffffd}, {0x4}, {0x6}, {0x7}, {0x8, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xf9a, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x200, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x1000}, {0x3716}, {0x9}, {0xfff01, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xf728}, {0x400}, {0x101, 0x0, 0x1}, {0x20}, {0x1}, {0x3, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x7f, 0x0, 0x1}, {0x9}, {0x5}]}, @RTA_VIA={0x14, 0x12, {0x5, "37ebf10dbbc569e1330cdc3184b3"}}, @RTA_DST={0x8, 0x1, {0x7fff, 0x0, 0x1}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x7}, @RTA_NEWDST={0x84, 0x13, [{0xffffc, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x6}, {0x20, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x8001, 0x0, 0x1}, {0x7}, {0x1, 0x0, 0x1}, {0x5}, {0x80}, {0x1ff}, {0x0, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x2}, {0x3}, {0xffe00}, {0x6}, {0x81}, {0x800, 0x0, 0x1}, {0x5}, {0x8000}, {0x7, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x5}, {0x1f, 0x0, 0x1}, {0x8}, {0x3}, {0xa842, 0x0, 0x1}]}]}, 0x154}}, 0x0) 15:29:30 executing program 5: r0 = socket(0x1e, 0x0, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x120) 15:29:30 executing program 2: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xfd79, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b435dc2ea", @ANYRES32=0x0], 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250000000008000100", @ANYRES32=r1, @ANYBLOB="080004000a01010108000500ffffff08000400e0000001080008000200000008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\t\x00\x00\x00\x00\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0xc080) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) 15:29:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffff94b80300000020000000000200", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x2}, 0x4004000) 15:29:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x103002, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0xab3, 0x8, 0x4, 0x0, 0xa0e, {}, {0x4, 0x0, 0xff, 0x3f, 0x30, 0x2, "07b9764b"}, 0xffffac3b, 0x4, {}, 0xffff, 0x0, r2}) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x103002, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0xab3, 0x8, 0x4, 0x0, 0xa0e, {}, {0x4, 0x0, 0xff, 0x3f, 0x30, 0x2, "07b9764b"}, 0xffffac3b, 0x4, {}, 0xffff, 0x0, r2}) (async) 15:29:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffff94b80300000020000000000200", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x2}, 0x4004000) 15:29:30 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@mpls_delroute={0x154, 0x19, 0x1, 0x70bd25, 0x25dfdbfb, {0x1c, 0x24, 0x20, 0x0, 0xff, 0x2, 0xfe, 0x3, 0x100}, [@RTA_MULTIPATH={0xc, 0x9, {0xfffd, 0x0, 0x24}}, @RTA_NEWDST={0x84, 0x13, [{0x1ff, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x5d5}, {0x4}, {0xffffd}, {0x4}, {0x6}, {0x7}, {0x8, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xf9a, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x200, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x1000}, {0x3716}, {0x9}, {0xfff01, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xf728}, {0x400}, {0x101, 0x0, 0x1}, {0x20}, {0x1}, {0x3, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x7f, 0x0, 0x1}, {0x9}, {0x5}]}, @RTA_VIA={0x14, 0x12, {0x5, "37ebf10dbbc569e1330cdc3184b3"}}, @RTA_DST={0x8, 0x1, {0x7fff, 0x0, 0x1}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x7}, @RTA_NEWDST={0x84, 0x13, [{0xffffc, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x6}, {0x20, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x8001, 0x0, 0x1}, {0x7}, {0x1, 0x0, 0x1}, {0x5}, {0x80}, {0x1ff}, {0x0, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x2}, {0x3}, {0xffe00}, {0x6}, {0x81}, {0x800, 0x0, 0x1}, {0x5}, {0x8000}, {0x7, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x5}, {0x1f, 0x0, 0x1}, {0x8}, {0x3}, {0xa842, 0x0, 0x1}]}]}, 0x154}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@mpls_delroute={0x154, 0x19, 0x1, 0x70bd25, 0x25dfdbfb, {0x1c, 0x24, 0x20, 0x0, 0xff, 0x2, 0xfe, 0x3, 0x100}, [@RTA_MULTIPATH={0xc, 0x9, {0xfffd, 0x0, 0x24}}, @RTA_NEWDST={0x84, 0x13, [{0x1ff, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x5d5}, {0x4}, {0xffffd}, {0x4}, {0x6}, {0x7}, {0x8, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xf9a, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x200, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x1000}, {0x3716}, {0x9}, {0xfff01, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xf728}, {0x400}, {0x101, 0x0, 0x1}, {0x20}, {0x1}, {0x3, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x7f, 0x0, 0x1}, {0x9}, {0x5}]}, @RTA_VIA={0x14, 0x12, {0x5, "37ebf10dbbc569e1330cdc3184b3"}}, @RTA_DST={0x8, 0x1, {0x7fff, 0x0, 0x1}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x7}, @RTA_NEWDST={0x84, 0x13, [{0xffffc, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x6}, {0x20, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x8001, 0x0, 0x1}, {0x7}, {0x1, 0x0, 0x1}, {0x5}, {0x80}, {0x1ff}, {0x0, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x2}, {0x3}, {0xffe00}, {0x6}, {0x81}, {0x800, 0x0, 0x1}, {0x5}, {0x8000}, {0x7, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x5}, {0x1f, 0x0, 0x1}, {0x8}, {0x3}, {0xa842, 0x0, 0x1}]}]}, 0x154}}, 0x0) (async) 15:29:30 executing program 5: r0 = socket(0x1e, 0x0, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x120) 15:29:30 executing program 2: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xfd79, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b435dc2ea", @ANYRES32=0x0], 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250000000008000100", @ANYRES32=r1, @ANYBLOB="080004000a01010108000500ffffff08000400e0000001080008000200000008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\t\x00\x00\x00\x00\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0xc080) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) 15:29:30 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, 0x0, 0x3, {0x2, 0xf0, 0x4}, 0xfc}, 0x18) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x1, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/58, 0x3a}]}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:30 executing program 5: socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x120) 15:29:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffff94b80300000020000000000200", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x2}, 0x4004000) 15:29:31 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001640)}, 0x120) 15:29:31 executing program 1: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@mpls_delroute={0x154, 0x19, 0x1, 0x70bd25, 0x25dfdbfb, {0x1c, 0x24, 0x20, 0x0, 0xff, 0x2, 0xfe, 0x3, 0x100}, [@RTA_MULTIPATH={0xc, 0x9, {0xfffd, 0x0, 0x24}}, @RTA_NEWDST={0x84, 0x13, [{0x1ff, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x5d5}, {0x4}, {0xffffd}, {0x4}, {0x6}, {0x7}, {0x8, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xf9a, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x200, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x1000}, {0x3716}, {0x9}, {0xfff01, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xf728}, {0x400}, {0x101, 0x0, 0x1}, {0x20}, {0x1}, {0x3, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x7f, 0x0, 0x1}, {0x9}, {0x5}]}, @RTA_VIA={0x14, 0x12, {0x5, "37ebf10dbbc569e1330cdc3184b3"}}, @RTA_DST={0x8, 0x1, {0x7fff, 0x0, 0x1}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x7}, @RTA_NEWDST={0x84, 0x13, [{0xffffc, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x6}, {0x20, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x8001, 0x0, 0x1}, {0x7}, {0x1, 0x0, 0x1}, {0x5}, {0x80}, {0x1ff}, {0x0, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x2}, {0x3}, {0xffe00}, {0x6}, {0x81}, {0x800, 0x0, 0x1}, {0x5}, {0x8000}, {0x7, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x5}, {0x1f, 0x0, 0x1}, {0x8}, {0x3}, {0xa842, 0x0, 0x1}]}]}, 0x154}}, 0x0) 15:29:31 executing program 2: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xfd79, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b435dc2ea", @ANYRES32=0x0], 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250000000008000100", @ANYRES32=r1, @ANYBLOB="080004000a01010108000500ffffff08000400e0000001080008000200000008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\t\x00\x00\x00\x00\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0xc080) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:29:31 executing program 5: socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x120) 15:29:31 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, 0x0, 0x3, {0x2, 0xf0, 0x4}, 0xfc}, 0x18) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x1, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/58, 0x3a}]}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:31 executing program 0: syz_io_uring_setup(0x6eb8, &(0x7f0000000100)={0x0, 0xf513, 0x2, 0x0, 0x395}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x6, 0x3f, 0x0, 0x10000, 0x5}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffffece, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 15:29:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) bind$phonet(r1, &(0x7f0000000100)={0x23, 0x7f, 0x66, 0xff}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) 15:29:31 executing program 5: socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x120) 15:29:31 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, 0x0, 0x3, {0x2, 0xf0, 0x4}, 0xfc}, 0x18) (async, rerun: 32) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x1, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/58, 0x3a}]}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:31 executing program 0: syz_io_uring_setup(0x6eb8, &(0x7f0000000100)={0x0, 0xf513, 0x2, 0x0, 0x395}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x6, 0x3f, 0x0, 0x10000, 0x5}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffffece, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_setup(0x6eb8, &(0x7f0000000100)={0x0, 0xf513, 0x2, 0x0, 0x395}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000180)) (async) syz_io_uring_submit(0x0, r0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x6, 0x3f, 0x0, 0x10000, 0x5}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffffece, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) 15:29:31 executing program 2: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xfd79, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b435dc2ea", @ANYRES32=0x0], 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250000000008000100", @ANYRES32=r1, @ANYBLOB="080004000a01010108000500ffffff08000400e0000001080008000200000008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\t\x00\x00\x00\x00\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0xc080) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) 15:29:31 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001640)}, 0x120) 15:29:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bind$phonet(r1, &(0x7f0000000100)={0x23, 0x7f, 0x66, 0xff}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) 15:29:31 executing program 5: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, 0x0, 0x120) 15:29:31 executing program 2: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xfd79, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b435dc2ea", @ANYRES32=0x0], 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250000000008000100", @ANYRES32=r1, @ANYBLOB="080004000a01010108000500ffffff08000400e0000001080008000200000008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\t\x00\x00\x00\x00\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0xc080) 15:29:31 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001640)}, 0x120) 15:29:31 executing program 5: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, 0x0, 0x120) 15:29:31 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001640)=[{0x0}], 0x1}, 0x120) 15:29:31 executing program 2: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xfd79, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b435dc2ea", @ANYRES32=0x0], 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) 15:29:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) bind$phonet(r1, &(0x7f0000000100)={0x23, 0x7f, 0x66, 0xff}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) 15:29:31 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) 15:29:31 executing program 0: syz_io_uring_setup(0x6eb8, &(0x7f0000000100)={0x0, 0xf513, 0x2, 0x0, 0x395}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x6, 0x3f, 0x0, 0x10000, 0x5}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffffece, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) 15:29:31 executing program 5: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, 0x0, 0x120) 15:29:31 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001640)=[{0x0}], 0x1}, 0x120) 15:29:31 executing program 2: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xfd79, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b435dc2ea", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x40}}, 0x18}}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x8101, 0x28, 0x8}, 0x18) 15:29:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x40}}, 0x18}}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x8101, 0x28, 0x8}, 0x18) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x8101, 0x28, 0x8}, 0x18) 15:29:31 executing program 5: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 15:29:31 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001640)=[{0x0}], 0x1}, 0x120) 15:29:31 executing program 2: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000340), 0xfd79, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b435dc2ea", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="feffffff14000100000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x109100, 0x60) sendmsg$can_j1939(r1, &(0x7f0000001180)={&(0x7f0000000100)={0x1d, 0x0, 0x3, {0x2, 0xff, 0x4}, 0xff}, 0x18, &(0x7f0000001140)={&(0x7f0000000140)="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", 0x1000}, 0x1, 0x0, 0x0, 0x7b58c21eb072d7dd}, 0x54) 15:29:31 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}], 0x1}, 0x0) 15:29:31 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) (rerun: 64) 15:29:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x40}}, 0x18}}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x8101, 0x28, 0x8}, 0x18) 15:29:31 executing program 5: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xfd79, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b435dc2ea", @ANYRES32=0x0], 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250000000008000100", @ANYRES32=r1, @ANYBLOB="080004000a01010108000500ffffff08000400e0000001080008000200000008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\t\x00\x00\x00\x00\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0xc080) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) 15:29:31 executing program 2: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000340), 0xfd79, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b435dc2ea", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="feffffff14000100000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x109100, 0x60) sendmsg$can_j1939(r1, &(0x7f0000001180)={&(0x7f0000000100)={0x1d, 0x0, 0x3, {0x2, 0xff, 0x4}, 0xff}, 0x18, &(0x7f0000001140)={&(0x7f0000000140)="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", 0x1000}, 0x1, 0x0, 0x0, 0x7b58c21eb072d7dd}, 0x54) 15:29:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\t%\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x18}}, 0x0) 15:29:31 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0) read$qrtrtun(r0, &(0x7f00000001c0)=""/244, 0xf4) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) times(&(0x7f0000000100)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xe3, &(0x7f00000002c0)=""/227}, &(0x7f0000000180)="b472b4451634", 0x0, 0x0, 0x10010, 0x3, 0x0}) 15:29:31 executing program 2: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000340), 0xfd79, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b435dc2ea", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="feffffff14000100000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x109100, 0x60) (async) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x109100, 0x60) sendmsg$can_j1939(r1, &(0x7f0000001180)={&(0x7f0000000100)={0x1d, 0x0, 0x3, {0x2, 0xff, 0x4}, 0xff}, 0x18, &(0x7f0000001140)={&(0x7f0000000140)="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", 0x1000}, 0x1, 0x0, 0x0, 0x7b58c21eb072d7dd}, 0x54) 15:29:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\t%\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x18}}, 0x0) 15:29:32 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) (async) 15:29:32 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8040) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:32 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0) read$qrtrtun(r0, &(0x7f00000001c0)=""/244, 0xf4) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) times(&(0x7f0000000100)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xe3, &(0x7f00000002c0)=""/227}, &(0x7f0000000180)="b472b4451634", 0x0, 0x0, 0x10010, 0x3, 0x0}) 15:29:32 executing program 0: r0 = socket(0x1d, 0xa, 0x80000000) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001b40)=ANY=[@ANYBLOB="18020000000000000000be0c860def539300000000000000", @ANYRES32=0x0], 0x18}}, 0x0) mmap$qrtrtun(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x10, 0xffffffffffffffff, 0xffe0000000000000) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) r3 = openat$incfs(r2, &(0x7f0000000280)='.log\x00', 0x200000, 0x8) mmap$snddsp_control(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x2000002, 0x810, r3, 0x83000000) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000001780)={&(0x7f0000001700)=[{0x9ffd, 0x200, 0xd6, &(0x7f00000002c0)="d79b8344b251964a5b48c29b4793f730b423b99614743d35557297f95feda5d7c0f44b435914c7518bf61f1fe8645175d4a4dd770582818754f2288474b351148353592b3fbb6b706afa419453d849780738d0d9a7a18f980afbfdc602bd345754578fcafded3fa4273cccdf34baab16acd43ac5f27f97ef3f113d15e51d8e84561c7d14caeb4786546ed8442932caf148af0ee905299476c2460f031563ddbfbf72c66d4db3740b662ee4b030b7c92a6525b07e688182e2e771f2c99bc14ad0875cd358f523566a9f68683b72bcf39b1da668634b43"}, {0x2, 0xcc00, 0xfc, &(0x7f00000003c0)="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"}, {0x0, 0x7010, 0xd5, &(0x7f0000000500)="db49487dec5a024256811f56af924917f282996cd49a20f95747ee47701e10ed57c9ae8700b16ab14ea8b7378804838b8a3571035ed8091e2e18df4db49ebecd5790f84da63de84f2dc09431e17cbe993c73b97826336a6fef11b064138c3559f32988c95802b10550aea1a2acd6f59dc8e5eb761456662e22c00edc9be4d491a00498dc86a6f6fa6208658e6aa7a3b14ae65c6a1a9fd4624401ce45d1f28e59bdc4d4424e58056ca52fa19e21e088c366ccd09482c9f0674ab042e2ebcba370a007cb6ccfd31e6c024f6f7f9bf7386dd046dd46be"}, {0x4, 0x401, 0xf3, &(0x7f0000000600)="a6fb7ebe7c5e950151278fa73fc7ab3303754534264db9eea90fd7ffd2fbc13f6100fb5f2e3c0a2ef8aea4232da77c319ebe31142cff6475630795e4f181b41a463d94747a8dc031eafabca405cef5111b83cb0c76e9064d3968cdcc28b56b14607e92c1936d09d15a502a1e4976129becb871ef32cc378d71c29a7af2288607cc639de1ea326c67cbe1aed58b84f30c5d2f4c8bfc888ed7abe0d01a65acc0dc0a64e3bfaeae4871eb8f4cfb492eacd37ed32ec4f104649672c99c866f04f9ab1eeb70c0d9737113dd047dd1188b022826fd744c25eb419994027f388dbc8f37b27948163671822d84bcf27532864d60025bfb"}, {0x4, 0xc01, 0x1000, &(0x7f0000000700)="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"}], 0x5}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f00000017c0)="c4a36d7b727c00b9950800000f3266ba610066ed6467f3653e450f08470f01c848b8b4730000000000000f23c80f21f835080030000f23f8c423d15c04f20aad66baf80cb8d2c68283ef66bafc0cb0f0ee66400f388039", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0xfc, 0x0, 0x8001, 0x50, @empty, @empty, 0x80, 0x7800, 0xe9, 0x400}}) socket$nl_rdma(0x10, 0x3, 0x14) r5 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$incfs(r5, &(0x7f0000001b00)='.pending_reads\x00', 0x480401, 0x8) r6 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000040)=0x8) clock_gettime(0x0, &(0x7f0000001900)={0x0, 0x0}) pselect6(0x40, &(0x7f0000001840)={0x7, 0x3, 0x9a, 0x0, 0x8, 0x6, 0x8001, 0xffffffff}, &(0x7f0000001880)={0x7fff, 0x31b, 0x2, 0x8, 0x9, 0x0, 0xffffffff, 0x7fffffffffffffff}, &(0x7f00000018c0)={0x0, 0x6, 0x9, 0x1000, 0x4000000000000000, 0x8, 0x0, 0x2}, &(0x7f0000001940)={r7, r8+10000000}, &(0x7f00000019c0)={&(0x7f0000001980)={[0x7eab]}, 0x8}) r9 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) lstat(&(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000001c40)={{0x1, 0x1, 0x18, r9, {r10}}, './file0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@bridge_newvlan={0x3c, 0x70, 0x200, 0x70bd27, 0x25dfdbfd, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x844) 15:29:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xfd79, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b435dc2ea", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\t%\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x18}}, 0x0) 15:29:32 executing program 4: socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:32 executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000340), 0xfd79, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b435dc2ea", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:32 executing program 1: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x8c080) bind$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={0x1d, 0x0, 0x2, {0x0, 0xf0}, 0xfe}, 0x18) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffffe, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x3c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x382e463ae01c9942}, 0x800) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x3c, 0x1402, 0x1, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x20000080) syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000300)) 15:29:32 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) setns(r0, 0x10000000) r2 = syz_io_uring_setup(0x2e44, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x0, 0x4012, r2, 0x8000000) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x6000, @fd_index=0x5, 0xfffffffffffffffd, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/93, 0x5d}, {&(0x7f0000000140)=""/220, 0xdc}, {&(0x7f0000000240)=""/70, 0x46}, {&(0x7f00000002c0)=""/231, 0xe7}, {&(0x7f00000003c0)=""/97, 0x61}], 0x5, 0x0, 0x1}, 0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) socket$nl_route(0x10, 0x3, 0x0) 15:29:32 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0) read$qrtrtun(r0, &(0x7f00000001c0)=""/244, 0xf4) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) times(&(0x7f0000000100)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xe3, &(0x7f00000002c0)=""/227}, &(0x7f0000000180)="b472b4451634", 0x0, 0x0, 0x10010, 0x3, 0x0}) 15:29:32 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8040) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8040) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 15:29:32 executing program 0: r0 = socket(0x1d, 0xa, 0x80000000) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001b40)=ANY=[@ANYBLOB="18020000000000000000be0c860def539300000000000000", @ANYRES32=0x0], 0x18}}, 0x0) (async) mmap$qrtrtun(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x10, 0xffffffffffffffff, 0xffe0000000000000) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) r3 = openat$incfs(r2, &(0x7f0000000280)='.log\x00', 0x200000, 0x8) mmap$snddsp_control(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x2000002, 0x810, r3, 0x83000000) (async) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000001780)={&(0x7f0000001700)=[{0x9ffd, 0x200, 0xd6, &(0x7f00000002c0)="d79b8344b251964a5b48c29b4793f730b423b99614743d35557297f95feda5d7c0f44b435914c7518bf61f1fe8645175d4a4dd770582818754f2288474b351148353592b3fbb6b706afa419453d849780738d0d9a7a18f980afbfdc602bd345754578fcafded3fa4273cccdf34baab16acd43ac5f27f97ef3f113d15e51d8e84561c7d14caeb4786546ed8442932caf148af0ee905299476c2460f031563ddbfbf72c66d4db3740b662ee4b030b7c92a6525b07e688182e2e771f2c99bc14ad0875cd358f523566a9f68683b72bcf39b1da668634b43"}, {0x2, 0xcc00, 0xfc, &(0x7f00000003c0)="8131de22d4a0b240610284e16026e4da578690727432fb19b84a744787b896f61cfe8a54b4d8783e431755d2d97ea35dbb8da0b507eac6f1c069bcc3fe7e9e1bfb8848dada1ca76c53b2c55553344aca1845c41c4e5219af165f81e69aa2b5a94fa69ecd4b1ab44f08c22f79131e5df9845f536c9c28dbcdc36efd6e9d5445866f975c4b9201e226b95022a213194a1193db60bff03c4b313a83ed6f5df1cecc700dd168d1acbddaa4b45822dc4773e1241c52fbd18fff2ef1a7ef42777208442913d7950bcea5cc15ea14aef8dfb49d09f9c8a90910668ac668882de7413764c005cd0ba366c98c0dd7e697207592309376f50926290cfe5ddc4e7e"}, {0x0, 0x7010, 0xd5, &(0x7f0000000500)="db49487dec5a024256811f56af924917f282996cd49a20f95747ee47701e10ed57c9ae8700b16ab14ea8b7378804838b8a3571035ed8091e2e18df4db49ebecd5790f84da63de84f2dc09431e17cbe993c73b97826336a6fef11b064138c3559f32988c95802b10550aea1a2acd6f59dc8e5eb761456662e22c00edc9be4d491a00498dc86a6f6fa6208658e6aa7a3b14ae65c6a1a9fd4624401ce45d1f28e59bdc4d4424e58056ca52fa19e21e088c366ccd09482c9f0674ab042e2ebcba370a007cb6ccfd31e6c024f6f7f9bf7386dd046dd46be"}, {0x4, 0x401, 0xf3, &(0x7f0000000600)="a6fb7ebe7c5e950151278fa73fc7ab3303754534264db9eea90fd7ffd2fbc13f6100fb5f2e3c0a2ef8aea4232da77c319ebe31142cff6475630795e4f181b41a463d94747a8dc031eafabca405cef5111b83cb0c76e9064d3968cdcc28b56b14607e92c1936d09d15a502a1e4976129becb871ef32cc378d71c29a7af2288607cc639de1ea326c67cbe1aed58b84f30c5d2f4c8bfc888ed7abe0d01a65acc0dc0a64e3bfaeae4871eb8f4cfb492eacd37ed32ec4f104649672c99c866f04f9ab1eeb70c0d9737113dd047dd1188b022826fd744c25eb419994027f388dbc8f37b27948163671822d84bcf27532864d60025bfb"}, {0x4, 0xc01, 0x1000, &(0x7f0000000700)="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"}], 0x5}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f00000017c0)="c4a36d7b727c00b9950800000f3266ba610066ed6467f3653e450f08470f01c848b8b4730000000000000f23c80f21f835080030000f23f8c423d15c04f20aad66baf80cb8d2c68283ef66bafc0cb0f0ee66400f388039", 0x57}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0xfc, 0x0, 0x8001, 0x50, @empty, @empty, 0x80, 0x7800, 0xe9, 0x400}}) (async, rerun: 32) socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 32) r5 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) openat$incfs(r5, &(0x7f0000001b00)='.pending_reads\x00', 0x480401, 0x8) (rerun: 64) r6 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000040)=0x8) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000001900)={0x0, 0x0}) (rerun: 32) pselect6(0x40, &(0x7f0000001840)={0x7, 0x3, 0x9a, 0x0, 0x8, 0x6, 0x8001, 0xffffffff}, &(0x7f0000001880)={0x7fff, 0x31b, 0x2, 0x8, 0x9, 0x0, 0xffffffff, 0x7fffffffffffffff}, &(0x7f00000018c0)={0x0, 0x6, 0x9, 0x1000, 0x4000000000000000, 0x8, 0x0, 0x2}, &(0x7f0000001940)={r7, r8+10000000}, &(0x7f00000019c0)={&(0x7f0000001980)={[0x7eab]}, 0x8}) (async) r9 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) lstat(&(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000001c40)={{0x1, 0x1, 0x18, r9, {r10}}, './file0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@bridge_newvlan={0x3c, 0x70, 0x200, 0x70bd27, 0x25dfdbfd, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x844) 15:29:32 executing program 1: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x8c080) bind$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={0x1d, 0x0, 0x2, {0x0, 0xf0}, 0xfe}, 0x18) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffffe, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x3c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x382e463ae01c9942}, 0x800) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x3c, 0x1402, 0x1, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x20000080) syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000300)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x8c080) (async) bind$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={0x1d, 0x0, 0x2, {0x0, 0xf0}, 0xfe}, 0x18) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffffe, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x3c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x382e463ae01c9942}, 0x800) (async) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x3c, 0x1402, 0x1, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x20000080) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) (async) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) (async) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000300)) (async) 15:29:32 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0) read$qrtrtun(r0, &(0x7f00000001c0)=""/244, 0xf4) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) times(&(0x7f0000000100)) 15:29:32 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8040) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:32 executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000340), 0xfd79, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b435dc2ea", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:32 executing program 0: socket(0x1d, 0xa, 0x80000000) (async) r0 = socket(0x1d, 0xa, 0x80000000) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001b40)=ANY=[@ANYBLOB="18020000000000000000be0c860def539300000000000000", @ANYRES32=0x0], 0x18}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001b40)=ANY=[@ANYBLOB="18020000000000000000be0c860def539300000000000000", @ANYRES32=0x0], 0x18}}, 0x0) mmap$qrtrtun(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x10, 0xffffffffffffffff, 0xffe0000000000000) (async) mmap$qrtrtun(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x10, 0xffffffffffffffff, 0xffe0000000000000) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) openat$incfs(r2, &(0x7f0000000280)='.log\x00', 0x200000, 0x8) (async) r3 = openat$incfs(r2, &(0x7f0000000280)='.log\x00', 0x200000, 0x8) mmap$snddsp_control(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x2000002, 0x810, r3, 0x83000000) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000001780)={&(0x7f0000001700)=[{0x9ffd, 0x200, 0xd6, &(0x7f00000002c0)="d79b8344b251964a5b48c29b4793f730b423b99614743d35557297f95feda5d7c0f44b435914c7518bf61f1fe8645175d4a4dd770582818754f2288474b351148353592b3fbb6b706afa419453d849780738d0d9a7a18f980afbfdc602bd345754578fcafded3fa4273cccdf34baab16acd43ac5f27f97ef3f113d15e51d8e84561c7d14caeb4786546ed8442932caf148af0ee905299476c2460f031563ddbfbf72c66d4db3740b662ee4b030b7c92a6525b07e688182e2e771f2c99bc14ad0875cd358f523566a9f68683b72bcf39b1da668634b43"}, {0x2, 0xcc00, 0xfc, &(0x7f00000003c0)="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"}, {0x0, 0x7010, 0xd5, &(0x7f0000000500)="db49487dec5a024256811f56af924917f282996cd49a20f95747ee47701e10ed57c9ae8700b16ab14ea8b7378804838b8a3571035ed8091e2e18df4db49ebecd5790f84da63de84f2dc09431e17cbe993c73b97826336a6fef11b064138c3559f32988c95802b10550aea1a2acd6f59dc8e5eb761456662e22c00edc9be4d491a00498dc86a6f6fa6208658e6aa7a3b14ae65c6a1a9fd4624401ce45d1f28e59bdc4d4424e58056ca52fa19e21e088c366ccd09482c9f0674ab042e2ebcba370a007cb6ccfd31e6c024f6f7f9bf7386dd046dd46be"}, {0x4, 0x401, 0xf3, &(0x7f0000000600)="a6fb7ebe7c5e950151278fa73fc7ab3303754534264db9eea90fd7ffd2fbc13f6100fb5f2e3c0a2ef8aea4232da77c319ebe31142cff6475630795e4f181b41a463d94747a8dc031eafabca405cef5111b83cb0c76e9064d3968cdcc28b56b14607e92c1936d09d15a502a1e4976129becb871ef32cc378d71c29a7af2288607cc639de1ea326c67cbe1aed58b84f30c5d2f4c8bfc888ed7abe0d01a65acc0dc0a64e3bfaeae4871eb8f4cfb492eacd37ed32ec4f104649672c99c866f04f9ab1eeb70c0d9737113dd047dd1188b022826fd744c25eb419994027f388dbc8f37b27948163671822d84bcf27532864d60025bfb"}, {0x4, 0xc01, 0x1000, &(0x7f0000000700)="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"}], 0x5}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f00000017c0)="c4a36d7b727c00b9950800000f3266ba610066ed6467f3653e450f08470f01c848b8b4730000000000000f23c80f21f835080030000f23f8c423d15c04f20aad66baf80cb8d2c68283ef66bafc0cb0f0ee66400f388039", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0xfc, 0x0, 0x8001, 0x50, @empty, @empty, 0x80, 0x7800, 0xe9, 0x400}}) socket$nl_rdma(0x10, 0x3, 0x14) r5 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$incfs(r5, &(0x7f0000001b00)='.pending_reads\x00', 0x480401, 0x8) (async) openat$incfs(r5, &(0x7f0000001b00)='.pending_reads\x00', 0x480401, 0x8) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) r6 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000040)=0x8) clock_gettime(0x0, &(0x7f0000001900)={0x0, 0x0}) pselect6(0x40, &(0x7f0000001840)={0x7, 0x3, 0x9a, 0x0, 0x8, 0x6, 0x8001, 0xffffffff}, &(0x7f0000001880)={0x7fff, 0x31b, 0x2, 0x8, 0x9, 0x0, 0xffffffff, 0x7fffffffffffffff}, &(0x7f00000018c0)={0x0, 0x6, 0x9, 0x1000, 0x4000000000000000, 0x8, 0x0, 0x2}, &(0x7f0000001940)={r7, r8+10000000}, &(0x7f00000019c0)={&(0x7f0000001980)={[0x7eab]}, 0x8}) (async) pselect6(0x40, &(0x7f0000001840)={0x7, 0x3, 0x9a, 0x0, 0x8, 0x6, 0x8001, 0xffffffff}, &(0x7f0000001880)={0x7fff, 0x31b, 0x2, 0x8, 0x9, 0x0, 0xffffffff, 0x7fffffffffffffff}, &(0x7f00000018c0)={0x0, 0x6, 0x9, 0x1000, 0x4000000000000000, 0x8, 0x0, 0x2}, &(0x7f0000001940)={r7, r8+10000000}, &(0x7f00000019c0)={&(0x7f0000001980)={[0x7eab]}, 0x8}) r9 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) lstat(&(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000001c40)={{0x1, 0x1, 0x18, r9, {r10}}, './file0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@bridge_newvlan={0x3c, 0x70, 0x200, 0x70bd27, 0x25dfdbfd, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x844) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@bridge_newvlan={0x3c, 0x70, 0x200, 0x70bd27, 0x25dfdbfd, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x844) 15:29:33 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0) read$qrtrtun(r0, &(0x7f00000001c0)=""/244, 0xf4) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) 15:29:33 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x2a, &(0x7f00000000c0)=""/42}, &(0x7f0000000180)="a4f33c451f34", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x1900000000, 0x426402) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) 15:29:33 executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000340), 0xfd79, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b435dc2ea", @ANYRES32=0x0], 0x18}}, 0x0) [ 2324.436956][T11531] warn_alloc: 1 callbacks suppressed 15:29:33 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) [ 2324.436977][T11531] syz-executor.1: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 15:29:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 15:29:33 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0) read$qrtrtun(r0, &(0x7f00000001c0)=""/244, 0xf4) 15:29:33 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x2a, &(0x7f00000000c0)=""/42}, &(0x7f0000000180)="a4f33c451f34", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x1900000000, 0x426402) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) [ 2324.555361][T11531] CPU: 1 PID: 11531 Comm: syz-executor.1 Not tainted 6.2.0-syzkaller-12765-g982818426a0f #0 [ 2324.565505][T11531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2324.575609][T11531] Call Trace: [ 2324.578919][T11531] [ 2324.581879][T11531] dump_stack_lvl+0x136/0x150 [ 2324.586667][T11531] warn_alloc+0x213/0x360 15:29:33 executing program 1: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x8c080) bind$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={0x1d, 0x0, 0x2, {0x0, 0xf0}, 0xfe}, 0x18) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffffe, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x3c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x382e463ae01c9942}, 0x800) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x3c, 0x1402, 0x1, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x20000080) syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000300)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x8c080) (async) bind$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={0x1d, 0x0, 0x2, {0x0, 0xf0}, 0xfe}, 0x18) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffffe, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x3c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x382e463ae01c9942}, 0x800) (async) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x3c, 0x1402, 0x1, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x20000080) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) (async) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) (async) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000300)) (async) 15:29:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 15:29:33 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000200), 0x4) recvmsg$can_j1939(r1, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getlink={0x28, 0x12, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x500, 0x40210}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x430}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) 15:29:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 2324.586715][T11531] ? zone_watermark_ok_safe+0x300/0x300 [ 2324.586770][T11531] __vmalloc_node_range+0xf1c/0x1300 [ 2324.586821][T11531] ? kernel_clone+0xeb/0xa10 [ 2324.586858][T11531] ? delayed_vfree_work+0x70/0x70 [ 2324.586894][T11531] ? rcu_read_lock_sched_held+0x3e/0x70 15:29:33 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x2a, &(0x7f00000000c0)=""/42}, &(0x7f0000000180)="a4f33c451f34", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x1900000000, 0x426402) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) 15:29:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) 15:29:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 2324.586937][T11531] ? trace_kmem_cache_alloc+0xb1/0x110 [ 2324.586969][T11531] ? kernel_clone+0xeb/0xa10 [ 2324.586993][T11531] copy_process+0x1320/0x76c0 [ 2324.587017][T11531] ? kernel_clone+0xeb/0xa10 [ 2324.587044][T11531] ? find_held_lock+0x2d/0x110 15:29:33 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b435dc2ea", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) socket$inet6_udplite(0xa, 0x2, 0x88) [ 2324.587073][T11531] ? find_held_lock+0x2d/0x110 [ 2324.587103][T11531] ? __cleanup_sighand+0xb0/0xb0 [ 2324.587130][T11531] ? lock_downgrade+0x690/0x690 [ 2324.587154][T11531] ? folio_flags.constprop.0+0x53/0x150 [ 2324.587197][T11531] ? folio_add_lru+0x47f/0x7c0 [ 2324.587228][T11531] kernel_clone+0xeb/0xa10 [ 2324.587258][T11531] ? create_io_thread+0xf0/0xf0 [ 2324.587293][T11531] ? find_held_lock+0x2d/0x110 [ 2324.587327][T11531] __do_sys_clone+0xba/0x100 [ 2324.587353][T11531] ? kernel_clone+0xa10/0xa10 [ 2324.587392][T11531] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2324.587434][T11531] do_syscall_64+0x39/0xb0 [ 2324.587457][T11531] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2324.587499][T11531] RIP: 0033:0x7f1097e8d521 [ 2324.587519][T11531] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2324.587540][T11531] RSP: 002b:00007f10980cfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2324.587563][T11531] RAX: ffffffffffffffda RBX: 00007f1098b79700 RCX: 00007f1097e8d521 [ 2324.587580][T11531] RDX: 00007f1098b799d0 RSI: 00007f1098b792f0 RDI: 00000000003d0f00 [ 2324.587594][T11531] RBP: 00007f10980cfcb0 R08: 00007f1098b79700 R09: 00007f1098b79700 [ 2324.587609][T11531] R10: 00007f1098b799d0 R11: 0000000000000206 R12: 00007f10980cfb1e [ 2324.587622][T11531] R13: 00007f10980cfb1f R14: 00007f1098b79300 R15: 0000000000022000 [ 2324.587649][T11531] [ 2324.658886][T11531] Mem-Info: [ 2324.658905][T11531] active_anon:21189 inactive_anon:509 isolated_anon:0 [ 2324.658905][T11531] active_file:0 inactive_file:12789 isolated_file:0 [ 2324.658905][T11531] unevictable:768 dirty:0 writeback:0 [ 2324.658905][T11531] slab_reclaimable:22490 slab_unreclaimable:99068 [ 2324.658905][T11531] mapped:19281 shmem:3550 pagetables:559 [ 2324.658905][T11531] sec_pagetables:0 bounce:0 [ 2324.658905][T11531] kernel_misc_reclaimable:0 [ 2324.658905][T11531] free:1401072 free_pcp:11204 free_cma:0 [ 2324.658965][T11531] Node 0 active_anon:84756kB inactive_anon:2036kB active_file:0kB inactive_file:51080kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:77124kB dirty:0kB writeback:0kB shmem:12664kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:13308kB pagetables:2236kB sec_pagetables:0kB all_unreclaimable? no [ 2324.659024][T11531] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2324.659080][T11531] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2324.659146][T11531] lowmem_reserve[]: 0 2617 2619 2619 2619 [ 2324.659196][T11531] Node 0 DMA32 free:1656012kB boost:0kB min:35440kB low:44300kB high:53160kB reserved_highatomic:0KB active_anon:84716kB inactive_anon:2032kB active_file:0kB inactive_file:49536kB unevictable:1536kB writepending:0kB present:3129332kB managed:2684996kB mlocked:0kB bounce:0kB free_pcp:29668kB local_pcp:11016kB free_cma:0kB [ 2324.659261][T11531] lowmem_reserve[]: 0 0 1 1 1 [ 2324.659308][T11531] Node 0 Normal free:20kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:40kB inactive_anon:4kB active_file:0kB inactive_file:1544kB unevictable:0kB writepending:0kB present:1048576kB managed:1616kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 2324.659411][T11531] lowmem_reserve[]: 0 0 0 0 0 [ 2324.659458][T11531] Node 1 Normal free:3932896kB boost:0kB min:54444kB low:68052kB high:81660kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117608kB mlocked:0kB bounce:0kB free_pcp:15140kB local_pcp:7552kB free_cma:0kB [ 2324.659522][T11531] lowmem_reserve[]: 0 0 0 0 0 [ 2324.659569][T11531] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2324.659723][T11531] Node 0 DMA32: 3165*4kB (UME) 1305*8kB (UME) 739*16kB (UME) 131*32kB (UME) 106*64kB (UME) 49*128kB (UME) 65*256kB (UME) 28*512kB (UM) 10*1024kB (UME) 1*2048kB (M) 381*4096kB (UM) = 1656012kB [ 2324.659973][T11531] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 2324.660122][T11531] Node 1 Normal: 144*4kB (UME) 36*8kB (UE) 24*16kB (UE) 44*32kB (UME) 20*64kB (UME) 5*128kB (UE) 1*256kB (E) 0*512kB 2*1024kB (ME) 1*2048kB (E) 958*4096kB (UM) = 3932896kB [ 2324.660330][T11531] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2324.660351][T11531] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=4 hugepages_size=2048kB [ 2324.660370][T11531] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 15:29:34 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0) read$qrtrtun(r0, &(0x7f00000001c0)=""/244, 0xf4) 15:29:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x2e44, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000240)="e327ee5dc2f7be584c0d14d972b40642a66ef03853b88c8f4596abe071e6c6b8164996b8079df8e163805de146d3ee1569cf81a7403cf447b6722c61d6c2f07ee2e60763b2659b7050df0bd5a4ee6592ab5baffbd5e930776dd458ac642c36c05155d2b18320c95b058fef0776d387106a9e543b1410fe8f5ce932fbb0e263f5cd8c1647f2dcefb8451510abc168aae99eecf3b00847413d4b7eabe519c6d7e51be462bb471e13037bd6a5642ec43fa9393363767670a54c01f21887430a522763c579268598391ab9075a529d25f9cdb1e681d883f4bbe0b60a59320b6a", 0xde}) r3 = openat$incfs(r1, &(0x7f0000000380)='.log\x00', 0x2201, 0x8) read$qrtrtun(r3, &(0x7f00000003c0)=""/165, 0xa5) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x0, 0x4012, r2, 0x8000000) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x30, 0x4004, @fd=r1, 0xfffffffffffffff9, &(0x7f0000000040)=[{&(0x7f0000000140)=""/154, 0x9a}], 0x1, 0x15, 0x1}, 0x101) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRES8=r0], 0x18}}, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) r5 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000480)=0x4bf3) socket$nl_route(0x10, 0x3, 0x0) 15:29:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b435dc2ea", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 15:29:34 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x0, 0x70bd25, 0x25dddbfc, {0x2, 0x14, 0x20, 0x6, 0x3, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44845}, 0x800) 15:29:34 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000200), 0x4) recvmsg$can_j1939(r1, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getlink={0x28, 0x12, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x500, 0x40210}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x430}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) [ 2324.660389][T11531] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2324.660407][T11531] 16339 total pagecache pages [ 2324.660417][T11531] 0 pages in swap cache [ 2324.660425][T11531] Free swap = 0kB [ 2324.660434][T11531] Total swap = 0kB [ 2324.660441][T11531] 2097051 pages RAM [ 2324.660448][T11531] 0 pages HighMem/MovableOnly [ 2324.660454][T11531] 392156 pages reserved [ 2324.660461][T11531] 0 pages cma reserved 15:29:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b435dc2ea", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) (async) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:34 executing program 5: read$qrtrtun(0xffffffffffffffff, &(0x7f00000001c0)=""/244, 0xf4) 15:29:34 executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x0, 0x70bd25, 0x25dddbfc, {0x2, 0x14, 0x20, 0x6, 0x3, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44845}, 0x800) 15:29:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, 0x0}, 0x0) 15:29:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r2 = syz_io_uring_setup(0x2e44, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000240)="e327ee5dc2f7be584c0d14d972b40642a66ef03853b88c8f4596abe071e6c6b8164996b8079df8e163805de146d3ee1569cf81a7403cf447b6722c61d6c2f07ee2e60763b2659b7050df0bd5a4ee6592ab5baffbd5e930776dd458ac642c36c05155d2b18320c95b058fef0776d387106a9e543b1410fe8f5ce932fbb0e263f5cd8c1647f2dcefb8451510abc168aae99eecf3b00847413d4b7eabe519c6d7e51be462bb471e13037bd6a5642ec43fa9393363767670a54c01f21887430a522763c579268598391ab9075a529d25f9cdb1e681d883f4bbe0b60a59320b6a", 0xde}) (async, rerun: 64) r3 = openat$incfs(r1, &(0x7f0000000380)='.log\x00', 0x2201, 0x8) (rerun: 64) read$qrtrtun(r3, &(0x7f00000003c0)=""/165, 0xa5) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x0, 0x4012, r2, 0x8000000) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x30, 0x4004, @fd=r1, 0xfffffffffffffff9, &(0x7f0000000040)=[{&(0x7f0000000140)=""/154, 0x9a}], 0x1, 0x15, 0x1}, 0x101) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRES8=r0], 0x18}}, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) r5 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000480)=0x4bf3) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) 15:29:34 executing program 5: read$qrtrtun(0xffffffffffffffff, &(0x7f00000001c0)=""/244, 0xf4) 15:29:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:34 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x0, 0x70bd25, 0x25dddbfc, {0x2, 0x14, 0x20, 0x6, 0x3, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44845}, 0x800) 15:29:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, 0x0}, 0x0) 15:29:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:35 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000200), 0x4) recvmsg$can_j1939(r1, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getlink={0x28, 0x12, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x500, 0x40210}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x430}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) 15:29:35 executing program 5: read$qrtrtun(0xffffffffffffffff, &(0x7f00000001c0)=""/244, 0xf4) 15:29:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, 0x0}, 0x0) 15:29:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = syz_io_uring_setup(0x2e44, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000240)="e327ee5dc2f7be584c0d14d972b40642a66ef03853b88c8f4596abe071e6c6b8164996b8079df8e163805de146d3ee1569cf81a7403cf447b6722c61d6c2f07ee2e60763b2659b7050df0bd5a4ee6592ab5baffbd5e930776dd458ac642c36c05155d2b18320c95b058fef0776d387106a9e543b1410fe8f5ce932fbb0e263f5cd8c1647f2dcefb8451510abc168aae99eecf3b00847413d4b7eabe519c6d7e51be462bb471e13037bd6a5642ec43fa9393363767670a54c01f21887430a522763c579268598391ab9075a529d25f9cdb1e681d883f4bbe0b60a59320b6a", 0xde}) r3 = openat$incfs(r1, &(0x7f0000000380)='.log\x00', 0x2201, 0x8) read$qrtrtun(r3, &(0x7f00000003c0)=""/165, 0xa5) (async) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x0, 0x4012, r2, 0x8000000) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x30, 0x4004, @fd=r1, 0xfffffffffffffff9, &(0x7f0000000040)=[{&(0x7f0000000140)=""/154, 0x9a}], 0x1, 0x15, 0x1}, 0x101) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRES8=r0], 0x18}}, 0x0) (async, rerun: 32) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) r5 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000480)=0x4bf3) (async) socket$nl_route(0x10, 0x3, 0x0) 15:29:35 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:35 executing program 5: r0 = syz_open_dev$vcsn(0x0, 0x1, 0x0) read$qrtrtun(r0, &(0x7f00000001c0)=""/244, 0xf4) 15:29:35 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000080)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000)) 15:29:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={0x0, 0x18}}, 0x0) 15:29:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={0x0, 0x18}}, 0x0) 15:29:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=@ipmr_newroute={0x1c, 0x18, 0x8, 0x70bd30, 0x25dfdbff, {0x80, 0x80, 0x20, 0x1f, 0xfe, 0x2, 0xfe, 0x5, 0x200}}, 0x1c}}, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.pending_reads\x00', 0x103100, 0xc) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x20000000) 15:29:36 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000080)) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000)) 15:29:36 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000200), 0x4) recvmsg$can_j1939(r1, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:36 executing program 5: r0 = syz_open_dev$vcsn(0x0, 0x1, 0x0) read$qrtrtun(r0, &(0x7f00000001c0)=""/244, 0xf4) 15:29:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=@ipmr_newroute={0x1c, 0x18, 0x8, 0x70bd30, 0x25dfdbff, {0x80, 0x80, 0x20, 0x1f, 0xfe, 0x2, 0xfe, 0x5, 0x200}}, 0x1c}}, 0x0) (async) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.pending_reads\x00', 0x103100, 0xc) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x20000000) 15:29:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={0x0, 0x18}}, 0x0) 15:29:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=@ipmr_newroute={0x1c, 0x18, 0x8, 0x70bd30, 0x25dfdbff, {0x80, 0x80, 0x20, 0x1f, 0xfe, 0x2, 0xfe, 0x5, 0x200}}, 0x1c}}, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.pending_reads\x00', 0x103100, 0xc) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x20000000) (async) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x20000000) 15:29:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000100000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b435dc2ea"], 0x18}}, 0x0) 15:29:36 executing program 5: r0 = syz_open_dev$vcsn(0x0, 0x1, 0x0) read$qrtrtun(r0, &(0x7f00000001c0)=""/244, 0xf4) 15:29:36 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000080)) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000)) 15:29:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000100000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:36 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) read$qrtrtun(r0, &(0x7f00000001c0)=""/244, 0xf4) 15:29:36 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:36 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000014000800000000000000000002006f0e572f5e7a920000", @ANYRES32=0x0], 0x18}}, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140)={0x1}) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$I2C_TIMEOUT(r1, 0x702, 0x7) 15:29:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000100000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b435dc2ea"], 0x18}}, 0x0) 15:29:36 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) read$qrtrtun(r0, &(0x7f00000001c0)=""/244, 0xf4) 15:29:36 executing program 3: statx(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', 0x800, 0x20, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x10, 0x610340) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0xffffffffffffffff, 0x6, 0x0, @scatter={0xa, 0x0, &(0x7f0000000780)=[{}, {&(0x7f0000000080)=""/125, 0xffffffffffffff11}, {&(0x7f00000001c0)=""/170, 0xaa}, {&(0x7f00000006c0)=""/101, 0x65}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/94, 0x5e}, {&(0x7f0000000280)=""/7, 0x10}, {&(0x7f00000004c0)=""/21, 0x15}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/189, 0xbd}]}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000940)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xee01}}, './file0\x00'}) syz_open_dev$sg(&(0x7f0000000140), 0x5, 0x149001) 15:29:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b435dc2ea"], 0x18}}, 0x0) 15:29:36 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000014000800000000000000000002006f0e572f5e7a920000", @ANYRES32=0x0], 0x18}}, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140)={0x1}) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$I2C_TIMEOUT(r1, 0x702, 0x7) 15:29:36 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) read$qrtrtun(r0, &(0x7f00000001c0)=""/244, 0xf4) 15:29:37 executing program 3: statx(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', 0x800, 0x20, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x10, 0x610340) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0xffffffffffffffff, 0x6, 0x0, @scatter={0xa, 0x0, &(0x7f0000000780)=[{}, {&(0x7f0000000080)=""/125, 0xffffffffffffff11}, {&(0x7f00000001c0)=""/170, 0xaa}, {&(0x7f00000006c0)=""/101, 0x65}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/94, 0x5e}, {&(0x7f0000000280)=""/7, 0x10}, {&(0x7f00000004c0)=""/21, 0x15}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/189, 0xbd}]}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000940)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xee01}}, './file0\x00'}) syz_open_dev$sg(&(0x7f0000000140), 0x5, 0x149001) statx(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', 0x800, 0x20, &(0x7f0000000840)) (async) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) (async) syz_open_dev$sg(&(0x7f0000000100), 0x10, 0x610340) (async) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0xffffffffffffffff, 0x6, 0x0, @scatter={0xa, 0x0, &(0x7f0000000780)=[{}, {&(0x7f0000000080)=""/125, 0xffffffffffffff11}, {&(0x7f00000001c0)=""/170, 0xaa}, {&(0x7f00000006c0)=""/101, 0x65}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/94, 0x5e}, {&(0x7f0000000280)=""/7, 0x10}, {&(0x7f00000004c0)=""/21, 0x15}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/189, 0xbd}]}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000940)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xee01}}, './file0\x00'}) (async) syz_open_dev$sg(&(0x7f0000000140), 0x5, 0x149001) (async) 15:29:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x30170, r1, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x5) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000280)={&(0x7f0000ff0000/0x4000)=nil, 0x4000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x10, 0x40000000, r1, &(0x7f0000000100)='./file0\x00') sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x50, 0x0, 0x11, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) 15:29:37 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0) read$qrtrtun(0xffffffffffffffff, &(0x7f00000001c0)=""/244, 0xf4) 15:29:37 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (rerun: 32) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x30170, r1, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x5) (async) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000280)={&(0x7f0000ff0000/0x4000)=nil, 0x4000}) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) fanotify_mark(0xffffffffffffffff, 0x10, 0x40000000, r1, &(0x7f0000000100)='./file0\x00') (rerun: 32) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x50, 0x0, 0x11, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) 15:29:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=0x0], 0x18}}, 0x0) 15:29:37 executing program 1: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000014000800000000000000000002006f0e572f5e7a920000", @ANYRES32=0x0], 0x18}}, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140)={0x1}) (async) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$I2C_TIMEOUT(r1, 0x702, 0x7) 15:29:37 executing program 3: statx(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', 0x800, 0x20, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x10, 0x610340) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0xffffffffffffffff, 0x6, 0x0, @scatter={0xa, 0x0, &(0x7f0000000780)=[{}, {&(0x7f0000000080)=""/125, 0xffffffffffffff11}, {&(0x7f00000001c0)=""/170, 0xaa}, {&(0x7f00000006c0)=""/101, 0x65}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/94, 0x5e}, {&(0x7f0000000280)=""/7, 0x10}, {&(0x7f00000004c0)=""/21, 0x15}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/189, 0xbd}]}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000940)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xee01}}, './file0\x00'}) syz_open_dev$sg(&(0x7f0000000140), 0x5, 0x149001) 15:29:37 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0) read$qrtrtun(0xffffffffffffffff, &(0x7f00000001c0)=""/244, 0xf4) 15:29:37 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=0x0], 0x18}}, 0x0) 15:29:37 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0) read$qrtrtun(0xffffffffffffffff, &(0x7f00000001c0)=""/244, 0xf4) 15:29:37 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x0, 0x0, 0x6, 0xf9, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x648e0691, 0xcaf08c6343d62da3, 0x400000, 0x0}) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000)) 15:29:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x30170, r1, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x5) (async) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000280)={&(0x7f0000ff0000/0x4000)=nil, 0x4000}) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) fanotify_mark(0xffffffffffffffff, 0x10, 0x40000000, r1, &(0x7f0000000100)='./file0\x00') (async, rerun: 32) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x50, 0x0, 0x11, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) 15:29:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$NBD_DISCONNECT(r1, 0xab08) getgroups(0x4, &(0x7f0000000100)=[0xee00, 0x0, 0xee00, 0xffffffffffffffff]) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1865a579a4fe08704b627700000001000000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:38 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x0, 0x0, 0x6, 0xf9, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x648e0691, 0xcaf08c6343d62da3, 0x400000, 0x0}) (async, rerun: 32) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000)) (rerun: 32) 15:29:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=0x0], 0x18}}, 0x0) 15:29:38 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0) read$qrtrtun(r0, 0x0, 0x0) 15:29:38 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$NBD_DISCONNECT(r1, 0xab08) (async) getgroups(0x4, &(0x7f0000000100)=[0xee00, 0x0, 0xee00, 0xffffffffffffffff]) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1865a579a4fe08704b627700000001000000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x18}}, 0x0) 15:29:38 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0) read$qrtrtun(r0, 0x0, 0x0) 15:29:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x40, 0x4007, @fd_index=0xa, 0x80000000, &(0x7f0000000000)="a5d0cc3b45ad02707449773c65f4c6f2a858b546395c702c8d6c5aa68a15dafd22bb922e9bde1e0cd5f439681043ffece5e28689f39294e34c250717cdc5c4b094386c4283d846e00bbfa3b96686a5f6464bfd654fb4dd860d9bec2242158fd44235", 0x62, 0x2, 0x1}, 0xfffffffb) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000001400010000000000000000000200000007dc354bf3a1043cc7a16c0db0396b026e5c649c9427986f40c423d63d072156fcf41fdd929fecede7d69eaf8100bd8f778a2c", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:38 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x0, 0x0, 0x6, 0xf9, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x648e0691, 0xcaf08c6343d62da3, 0x400000, 0x0}) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000)) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x0, 0x0, 0x6, 0xf9, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x648e0691, 0xcaf08c6343d62da3, 0x400000, 0x0}) (async) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000)) (async) 15:29:38 executing program 4: socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x18}}, 0x0) 15:29:38 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0) read$qrtrtun(r0, 0x0, 0x0) 15:29:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$NBD_DISCONNECT(r1, 0xab08) getgroups(0x4, &(0x7f0000000100)=[0xee00, 0x0, 0xee00, 0xffffffffffffffff]) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1865a579a4fe08704b627700000001000000", @ANYRES32=0x0], 0x18}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1865a579a4fe08704b627700000001000000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:38 executing program 3: ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x40) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000000)) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)=0x3) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x8, 0x0, r1}, 0x80000001) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000080)={'exec ', '-*\x00'}, 0x8) 15:29:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x40, 0x4007, @fd_index=0xa, 0x80000000, &(0x7f0000000000)="a5d0cc3b45ad02707449773c65f4c6f2a858b546395c702c8d6c5aa68a15dafd22bb922e9bde1e0cd5f439681043ffece5e28689f39294e34c250717cdc5c4b094386c4283d846e00bbfa3b96686a5f6464bfd654fb4dd860d9bec2242158fd44235", 0x62, 0x2, 0x1}, 0xfffffffb) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x40, 0x4007, @fd_index=0xa, 0x80000000, &(0x7f0000000000)="a5d0cc3b45ad02707449773c65f4c6f2a858b546395c702c8d6c5aa68a15dafd22bb922e9bde1e0cd5f439681043ffece5e28689f39294e34c250717cdc5c4b094386c4283d846e00bbfa3b96686a5f6464bfd654fb4dd860d9bec2242158fd44235", 0x62, 0x2, 0x1}, 0xfffffffb) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000001400010000000000000000000200000007dc354bf3a1043cc7a16c0db0396b026e5c649c9427986f40c423d63d072156fcf41fdd929fecede7d69eaf8100bd8f778a2c", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x18}}, 0x0) 15:29:38 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0) read$qrtrtun(r0, 0x0, 0x0) 15:29:38 executing program 3: ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x40) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000000)) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)=0x3) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x8, 0x0, r1}, 0x80000001) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000080)={'exec ', '-*\x00'}, 0x8) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x40) (async) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000000)) (async) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)=0x3) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x8, 0x0, r1}, 0x80000001) (async) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000080)={'exec ', '-*\x00'}, 0x8) (async) 15:29:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x40, 0x4007, @fd_index=0xa, 0x80000000, &(0x7f0000000000)="a5d0cc3b45ad02707449773c65f4c6f2a858b546395c702c8d6c5aa68a15dafd22bb922e9bde1e0cd5f439681043ffece5e28689f39294e34c250717cdc5c4b094386c4283d846e00bbfa3b96686a5f6464bfd654fb4dd860d9bec2242158fd44235", 0x62, 0x2, 0x1}, 0xfffffffb) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000001400010000000000000000000200000007dc354bf3a1043cc7a16c0db0396b026e5c649c9427986f40c423d63d072156fcf41fdd929fecede7d69eaf8100bd8f778a2c", @ANYRES32=0x0], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x40, 0x4007, @fd_index=0xa, 0x80000000, &(0x7f0000000000)="a5d0cc3b45ad02707449773c65f4c6f2a858b546395c702c8d6c5aa68a15dafd22bb922e9bde1e0cd5f439681043ffece5e28689f39294e34c250717cdc5c4b094386c4283d846e00bbfa3b96686a5f6464bfd654fb4dd860d9bec2242158fd44235", 0x62, 0x2, 0x1}, 0xfffffffb) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000001400010000000000000000000200000007dc354bf3a1043cc7a16c0db0396b026e5c649c9427986f40c423d63d072156fcf41fdd929fecede7d69eaf8100bd8f778a2c", @ANYRES32=0x0], 0x18}}, 0x0) (async) 15:29:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000ff8000/0x3000)=nil, 0x930, 0x1, 0x212, r2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1402, 0x200, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x48080}, 0x4) 15:29:39 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:39 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0) read$qrtrtun(r0, 0x0, 0x0) 15:29:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:39 executing program 0: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 15:29:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000ff8000/0x3000)=nil, 0x930, 0x1, 0x212, r2, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1402, 0x200, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x48080}, 0x4) 15:29:39 executing program 3: ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x40) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000000)) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)=0x3) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x8, 0x0, r1}, 0x80000001) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000080)={'exec ', '-*\x00'}, 0x8) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x40) (async) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000000)) (async) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)=0x3) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x8, 0x0, r1}, 0x80000001) (async) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000080)={'exec ', '-*\x00'}, 0x8) (async) 15:29:39 executing program 0: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) (async) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 15:29:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:39 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0) read$qrtrtun(r0, 0x0, 0x0) 15:29:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000100), 0x80) (async) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000ff8000/0x3000)=nil, 0x930, 0x1, 0x212, r2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1402, 0x200, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x48080}, 0x4) 15:29:39 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x0, 0xfffffffffffffffd, 0x6, 0x5, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x400, 0x0, 0x0, 0x0}) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000140)={&(0x7f00000000c0), &(0x7f0000000100)=""/62, 0x3e}) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000080)=0x1) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xbf9e) 15:29:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:40 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:40 executing program 5: read$qrtrtun(0xffffffffffffffff, 0x0, 0x0) 15:29:40 executing program 0: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 15:29:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@ipv6_getaddr={0x94, 0x16, 0x400, 0x70bd2a, 0x25dfdbfd, {0xa, 0x78, 0xb, 0xfe}, [@IFA_FLAGS={0x8, 0x8, 0x400}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x7, 0x81}}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x8, 0x5, 0xe37}}, @IFA_ADDRESS={0x14, 0x1, @private0}, @IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) r3 = syz_open_dev$vcsn(&(0x7f0000000340), 0x3ff, 0x404200) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000090) 15:29:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:40 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x0, 0xfffffffffffffffd, 0x6, 0x5, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x400, 0x0, 0x0, 0x0}) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000140)={&(0x7f00000000c0), &(0x7f0000000100)=""/62, 0x3e}) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000080)=0x1) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xbf9e) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x0, 0xfffffffffffffffd, 0x6, 0x5, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x400, 0x0, 0x0, 0x0}) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000140)={&(0x7f00000000c0), &(0x7f0000000100)=""/62, 0x3e}) (async) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000080)=0x1) (async) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xbf9e) (async) 15:29:40 executing program 5: read$qrtrtun(0xffffffffffffffff, 0x0, 0x0) 15:29:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@ipv6_getaddr={0x94, 0x16, 0x400, 0x70bd2a, 0x25dfdbfd, {0xa, 0x78, 0xb, 0xfe}, [@IFA_FLAGS={0x8, 0x8, 0x400}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x7, 0x81}}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x8, 0x5, 0xe37}}, @IFA_ADDRESS={0x14, 0x1, @private0}, @IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) r3 = syz_open_dev$vcsn(&(0x7f0000000340), 0x3ff, 0x404200) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000090) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@ipv6_getaddr={0x94, 0x16, 0x400, 0x70bd2a, 0x25dfdbfd, {0xa, 0x78, 0xb, 0xfe}, [@IFA_FLAGS={0x8, 0x8, 0x400}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x7, 0x81}}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x8, 0x5, 0xe37}}, @IFA_ADDRESS={0x14, 0x1, @private0}, @IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) (async) pipe2$watch_queue(&(0x7f0000000280), 0x80) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) (async) syz_open_dev$vcsn(&(0x7f0000000340), 0x3ff, 0x404200) (async) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000090) (async) 15:29:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800000026000100000000000000000002000000ed07fc30ecb5c4bd56dee00525866183d1f5a2b08dbb4c0ec84ab854763608fca087af8c56530fde6cdfc1bae9e87348732c5135492e", @ANYRES32=0x0], 0x18}}, 0x0) timer_create(0x6, &(0x7f0000000000)={0x0, 0x21, 0x4, @thr={&(0x7f0000000140)="1d6fd842543a6e59d2b1ade5aa50d763a2d0bca555b77a8c0fabdf05b8c5d460961d8fddf81d39eceda71e39105c763dcf520dcfb7dfaf48c9a29780769a47ddd0a1c0ab6d6c88f4ca33607fa36e723882d719b21ca1a582874dfbd2646fce865014fdb3e2f8a5cc748a04d2351de000386bb8af0c1b918a37bda0fd0a57b7e29943bd2eb5b54b90630d8f4ffd0108cb72354089db5850a8da033a03c042", &(0x7f0000000200)="bbfcf464f250e7d2185dfd96c561b2a67c6c7c2821cae4e20d9faf35204343488a192a0e1296b11c8e47f3943c744c9b3ddbed759548a4e6059aa71b5328dd0411702adc27f2d09bf5e249ba7858066274f5e8"}}, &(0x7f0000000100)) 15:29:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:40 executing program 5: read$qrtrtun(0xffffffffffffffff, 0x0, 0x0) 15:29:40 executing program 4: r0 = socket(0x0, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:40 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x0, 0xfffffffffffffffd, 0x6, 0x5, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x400, 0x0, 0x0, 0x0}) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000140)={&(0x7f00000000c0), &(0x7f0000000100)=""/62, 0x3e}) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000080)=0x1) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xbf9e) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x0, 0xfffffffffffffffd, 0x6, 0x5, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x400, 0x0, 0x0, 0x0}) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000140)={&(0x7f00000000c0), &(0x7f0000000100)=""/62, 0x3e}) (async) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000080)=0x1) (async) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xbf9e) (async) 15:29:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@ipv6_getaddr={0x94, 0x16, 0x400, 0x70bd2a, 0x25dfdbfd, {0xa, 0x78, 0xb, 0xfe}, [@IFA_FLAGS={0x8, 0x8, 0x400}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x7, 0x81}}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x8, 0x5, 0xe37}}, @IFA_ADDRESS={0x14, 0x1, @private0}, @IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async, rerun: 32) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) (async, rerun: 32) r3 = syz_open_dev$vcsn(&(0x7f0000000340), 0x3ff, 0x404200) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000090) 15:29:40 executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800000026000100000000000000000002000000ed07fc30ecb5c4bd56dee00525866183d1f5a2b08dbb4c0ec84ab854763608fca087af8c56530fde6cdfc1bae9e87348732c5135492e", @ANYRES32=0x0], 0x18}}, 0x0) timer_create(0x6, &(0x7f0000000000)={0x0, 0x21, 0x4, @thr={&(0x7f0000000140)="1d6fd842543a6e59d2b1ade5aa50d763a2d0bca555b77a8c0fabdf05b8c5d460961d8fddf81d39eceda71e39105c763dcf520dcfb7dfaf48c9a29780769a47ddd0a1c0ab6d6c88f4ca33607fa36e723882d719b21ca1a582874dfbd2646fce865014fdb3e2f8a5cc748a04d2351de000386bb8af0c1b918a37bda0fd0a57b7e29943bd2eb5b54b90630d8f4ffd0108cb72354089db5850a8da033a03c042", &(0x7f0000000200)="bbfcf464f250e7d2185dfd96c561b2a67c6c7c2821cae4e20d9faf35204343488a192a0e1296b11c8e47f3943c744c9b3ddbed759548a4e6059aa71b5328dd0411702adc27f2d09bf5e249ba7858066274f5e8"}}, &(0x7f0000000100)) 15:29:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:40 executing program 5: r0 = syz_open_dev$vcsn(0x0, 0x1, 0x0) read$qrtrtun(r0, 0x0, 0x0) 15:29:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800000026000100000000000000000002000000ed07fc30ecb5c4bd56dee00525866183d1f5a2b08dbb4c0ec84ab854763608fca087af8c56530fde6cdfc1bae9e87348732c5135492e", @ANYRES32=0x0], 0x18}}, 0x0) (async) timer_create(0x6, &(0x7f0000000000)={0x0, 0x21, 0x4, @thr={&(0x7f0000000140)="1d6fd842543a6e59d2b1ade5aa50d763a2d0bca555b77a8c0fabdf05b8c5d460961d8fddf81d39eceda71e39105c763dcf520dcfb7dfaf48c9a29780769a47ddd0a1c0ab6d6c88f4ca33607fa36e723882d719b21ca1a582874dfbd2646fce865014fdb3e2f8a5cc748a04d2351de000386bb8af0c1b918a37bda0fd0a57b7e29943bd2eb5b54b90630d8f4ffd0108cb72354089db5850a8da033a03c042", &(0x7f0000000200)="bbfcf464f250e7d2185dfd96c561b2a67c6c7c2821cae4e20d9faf35204343488a192a0e1296b11c8e47f3943c744c9b3ddbed759548a4e6059aa71b5328dd0411702adc27f2d09bf5e249ba7858066274f5e8"}}, &(0x7f0000000100)) 15:29:40 executing program 5: r0 = syz_open_dev$vcsn(0x0, 0x1, 0x0) read$qrtrtun(r0, 0x0, 0x0) 15:29:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) 15:29:41 executing program 5: r0 = syz_open_dev$vcsn(0x0, 0x1, 0x0) read$qrtrtun(r0, 0x0, 0x0) 15:29:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@delnexthop={0x20, 0x69, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [{0x8}]}, 0x20}}, 0x2051) 15:29:41 executing program 4: r0 = socket(0x0, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:41 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) read$qrtrtun(r0, 0x0, 0x0) 15:29:41 executing program 1: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@delnexthop={0x20, 0x69, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [{0x8}]}, 0x20}}, 0x2051) 15:29:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) (async) 15:29:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:41 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) read$qrtrtun(r0, 0x0, 0x0) 15:29:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x1, 0x80, 0x0, @private1, @remote, 0x7898, 0x7800, 0x5443bd53, 0x758d}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x20, 0x3f, 0x1a, @empty, @local, 0x10, 0x700, 0x86, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000005c0)={'vxcan1\x00', 0x0}) r5 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r7 = getpgrp(0x0) sched_rr_get_interval(r7, &(0x7f0000000000)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f00000007c0)=0xc) r9 = syz_open_dev$vcsn(&(0x7f0000000800), 0x6, 0x8080) sendmsg$nl_route(r5, &(0x7f0000000900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=@RTM_NEWNSID={0x54, 0x58, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8, 0x3, r6}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_PID={0x8, 0x2, r7}, @NETNSA_FD={0x8}, @NETNSA_PID={0x8}, @NETNSA_PID={0x8, 0x2, r8}, @NETNSA_FD={0x8, 0x3, r9}]}, 0x54}, 0x1, 0x0, 0x0, 0x48c0}, 0x200048c1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000600)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@RTM_NEWMDB={0x158, 0x54, 0x930, 0x70bd2d, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x0, 0x4, {@in6_addr=@remote, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x1, {@in6_addr=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x4, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x2, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xc00}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x4, 0x2, {@ip4=@dev={0xac, 0x14, 0x14, 0x23}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x0, {@in6_addr=@mcast2, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x3, 0x1, 0x2, {@ip4=@rand_addr=0x64010101, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x0, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0x4, {@in6_addr=@empty}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x0, 0x1, 0x1, {@in6_addr=@empty}}}]}, 0x158}}, 0x0) 15:29:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@delnexthop={0x20, 0x69, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [{0x8}]}, 0x20}}, 0x2051) 15:29:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) 15:29:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x1, 0x80, 0x0, @private1, @remote, 0x7898, 0x7800, 0x5443bd53, 0x758d}}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x20, 0x3f, 0x1a, @empty, @local, 0x10, 0x700, 0x86, 0x4}}) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000005c0)={'vxcan1\x00', 0x0}) r5 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r6 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) r7 = getpgrp(0x0) (rerun: 64) sched_rr_get_interval(r7, &(0x7f0000000000)) (async, rerun: 64) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f00000007c0)=0xc) (async, rerun: 64) r9 = syz_open_dev$vcsn(&(0x7f0000000800), 0x6, 0x8080) sendmsg$nl_route(r5, &(0x7f0000000900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=@RTM_NEWNSID={0x54, 0x58, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8, 0x3, r6}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_PID={0x8, 0x2, r7}, @NETNSA_FD={0x8}, @NETNSA_PID={0x8}, @NETNSA_PID={0x8, 0x2, r8}, @NETNSA_FD={0x8, 0x3, r9}]}, 0x54}, 0x1, 0x0, 0x0, 0x48c0}, 0x200048c1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000600)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@RTM_NEWMDB={0x158, 0x54, 0x930, 0x70bd2d, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x0, 0x4, {@in6_addr=@remote, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x1, {@in6_addr=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x4, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x2, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xc00}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x4, 0x2, {@ip4=@dev={0xac, 0x14, 0x14, 0x23}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x0, {@in6_addr=@mcast2, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x3, 0x1, 0x2, {@ip4=@rand_addr=0x64010101, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x0, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0x4, {@in6_addr=@empty}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x0, 0x1, 0x1, {@in6_addr=@empty}}}]}, 0x158}}, 0x0) 15:29:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:41 executing program 4: r0 = socket(0x0, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:41 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) read$qrtrtun(r0, 0x0, 0x0) 15:29:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x1f, 0x48, 0x4542, 0x31, @dev={0xfe, 0x80, '\x00', 0x23}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x40, 0x7f, 0x1}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="12000000", @ANYRES16=r2, @ANYBLOB="08002cbd7000fddbdf2502000000080002000000000008000100", @ANYRES32=r3, @ANYBLOB="0800050064010100060006000000000006000600a30a000008000900030000000800080000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1}}, 0x18}}, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000580), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'syztnl1\x00', r3, 0x2f, 0xff, 0x8, 0x464, 0x0, @private0, @mcast2, 0x8000, 0x10, 0x10001, 0x1ff}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x44, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x22}}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_LINK={0x8, 0x1, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 15:29:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x60000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'}) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x8001) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$NBD_DISCONNECT(r2, 0xab08) 15:29:41 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0) read$qrtrtun(0xffffffffffffffff, 0x0, 0x0) 15:29:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x1f, 0x48, 0x4542, 0x31, @dev={0xfe, 0x80, '\x00', 0x23}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x40, 0x7f, 0x1}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="12000000", @ANYRES16=r2, @ANYBLOB="08002cbd7000fddbdf2502000000080002000000000008000100", @ANYRES32=r3, @ANYBLOB="0800050064010100060006000000000006000600a30a000008000900030000000800080000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1}}, 0x18}}, 0x0) (async) r4 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000580), 0x6, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'syztnl1\x00', r3, 0x2f, 0xff, 0x8, 0x464, 0x0, @private0, @mcast2, 0x8000, 0x10, 0x10001, 0x1ff}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x44, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x22}}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_LINK={0x8, 0x1, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 15:29:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x60000) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'}) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x8001) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$NBD_DISCONNECT(r2, 0xab08) 15:29:41 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0) read$qrtrtun(0xffffffffffffffff, 0x0, 0x0) 15:29:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x1, 0x80, 0x0, @private1, @remote, 0x7898, 0x7800, 0x5443bd53, 0x758d}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x20, 0x3f, 0x1a, @empty, @local, 0x10, 0x700, 0x86, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000005c0)={'vxcan1\x00', 0x0}) (async) r5 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) r7 = getpgrp(0x0) (rerun: 32) sched_rr_get_interval(r7, &(0x7f0000000000)) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f00000007c0)=0xc) r9 = syz_open_dev$vcsn(&(0x7f0000000800), 0x6, 0x8080) sendmsg$nl_route(r5, &(0x7f0000000900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=@RTM_NEWNSID={0x54, 0x58, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8, 0x3, r6}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_PID={0x8, 0x2, r7}, @NETNSA_FD={0x8}, @NETNSA_PID={0x8}, @NETNSA_PID={0x8, 0x2, r8}, @NETNSA_FD={0x8, 0x3, r9}]}, 0x54}, 0x1, 0x0, 0x0, 0x48c0}, 0x200048c1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000600)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@RTM_NEWMDB={0x158, 0x54, 0x930, 0x70bd2d, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x0, 0x4, {@in6_addr=@remote, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x1, {@in6_addr=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x4, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x2, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xc00}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x4, 0x2, {@ip4=@dev={0xac, 0x14, 0x14, 0x23}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x0, {@in6_addr=@mcast2, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x3, 0x1, 0x2, {@ip4=@rand_addr=0x64010101, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x0, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0x4, {@in6_addr=@empty}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x0, 0x1, 0x1, {@in6_addr=@empty}}}]}, 0x158}}, 0x0) 15:29:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x60000) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'}) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x8001) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$NBD_DISCONNECT(r2, 0xab08) 15:29:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x1f, 0x48, 0x4542, 0x31, @dev={0xfe, 0x80, '\x00', 0x23}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x40, 0x7f, 0x1}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="12000000", @ANYRES16=r2, @ANYBLOB="08002cbd7000fddbdf2502000000080002000000000008000100", @ANYRES32=r3, @ANYBLOB="0800050064010100060006000000000006000600a30a000008000900030000000800080000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1}}, 0x18}}, 0x0) (async) r4 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) mbind(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000580), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'syztnl1\x00', r3, 0x2f, 0xff, 0x8, 0x464, 0x0, @private0, @mcast2, 0x8000, 0x10, 0x10001, 0x1ff}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x44, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x22}}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_LINK={0x8, 0x1, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 15:29:41 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0) read$qrtrtun(0xffffffffffffffff, 0x0, 0x0) 15:29:41 executing program 4: r0 = socket(0x1e, 0x0, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:41 executing program 4: r0 = socket(0x1e, 0x0, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000300)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffe, 0x6, 0x45, @scatter={0x4, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/166, 0xa6}, {&(0x7f00000001c0)=""/166, 0xa6}, {&(0x7f0000000280)=""/49, 0x31}, {&(0x7f0000000440)=""/231, 0xe7}]}, &(0x7f0000000180)="9aff3c451634", 0x0, 0x0, 0x10003, 0x0, 0x0}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x10001, 0x4c0000) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000080)) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r1) pipe2$watch_queue(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000780)={0x53, 0xfffffffffffffffe, 0xe, 0x7, @buffer={0x0, 0x64, &(0x7f0000000600)=""/100}, &(0x7f0000000680)="81ad491702cefe990d9334295498", &(0x7f00000006c0)=""/104, 0x4f, 0x14, 0xffffffffffffffff, &(0x7f0000000740)}) r5 = openat$incfs(r2, &(0x7f0000000340)='.pending_reads\x00', 0x0, 0x20) ioctl$SG_GET_LOW_DMA(r5, 0x227a, &(0x7f0000000540)) 15:29:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800000026000100000000000000000002000000ed07fc30ecb5c4bd56dee00525866183d1f5a2b08dbb4c0ec84ab854763608fca087af8c56530fde6cdfc1bae9e87348732c5135492e", @ANYRES32=0x0], 0x18}}, 0x0) timer_create(0x6, &(0x7f0000000000)={0x0, 0x21, 0x4, @thr={&(0x7f0000000140)="1d6fd842543a6e59d2b1ade5aa50d763a2d0bca555b77a8c0fabdf05b8c5d460961d8fddf81d39eceda71e39105c763dcf520dcfb7dfaf48c9a29780769a47ddd0a1c0ab6d6c88f4ca33607fa36e723882d719b21ca1a582874dfbd2646fce865014fdb3e2f8a5cc748a04d2351de000386bb8af0c1b918a37bda0fd0a57b7e29943bd2eb5b54b90630d8f4ffd0108cb72354089db5850a8da033a03c042", &(0x7f0000000200)="bbfcf464f250e7d2185dfd96c561b2a67c6c7c2821cae4e20d9faf35204343488a192a0e1296b11c8e47f3943c744c9b3ddbed759548a4e6059aa71b5328dd0411702adc27f2d09bf5e249ba7858066274f5e8"}}, &(0x7f0000000100)) 15:29:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = getpgrp(0x0) sched_rr_get_interval(r2, &(0x7f0000000000)) write$damon_target_ids(r1, &(0x7f0000000100)={@void, [{' ', r2}, {}, {' ', 0xffffffffffffffff}, {' ', 0xffffffffffffffff}]}, 0x54) 15:29:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b435d", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800000026000100000000000000000002000000ed07fc30ecb5c4bd56dee00525866183d1f5a2b08dbb4c0ec84ab854763608fca087af8c56530fde6cdfc1bae9e87348732c5135492e", @ANYRES32=0x0], 0x18}}, 0x0) timer_create(0x6, &(0x7f0000000000)={0x0, 0x21, 0x4, @thr={&(0x7f0000000140)="1d6fd842543a6e59d2b1ade5aa50d763a2d0bca555b77a8c0fabdf05b8c5d460961d8fddf81d39eceda71e39105c763dcf520dcfb7dfaf48c9a29780769a47ddd0a1c0ab6d6c88f4ca33607fa36e723882d719b21ca1a582874dfbd2646fce865014fdb3e2f8a5cc748a04d2351de000386bb8af0c1b918a37bda0fd0a57b7e29943bd2eb5b54b90630d8f4ffd0108cb72354089db5850a8da033a03c042", &(0x7f0000000200)="bbfcf464f250e7d2185dfd96c561b2a67c6c7c2821cae4e20d9faf35204343488a192a0e1296b11c8e47f3943c744c9b3ddbed759548a4e6059aa71b5328dd0411702adc27f2d09bf5e249ba7858066274f5e8"}}, &(0x7f0000000100)) 15:29:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000051}, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f00000003c0)={&(0x7f0000000280), &(0x7f00000002c0)=""/231, 0xe7}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) 15:29:42 executing program 4: r0 = socket(0x1e, 0x0, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b435d", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:42 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000300)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffe, 0x6, 0x45, @scatter={0x4, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/166, 0xa6}, {&(0x7f00000001c0)=""/166, 0xa6}, {&(0x7f0000000280)=""/49, 0x31}, {&(0x7f0000000440)=""/231, 0xe7}]}, &(0x7f0000000180)="9aff3c451634", 0x0, 0x0, 0x10003, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000000), 0x10001, 0x4c0000) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x10001, 0x4c0000) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000080)) (async) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000080)) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r1) pipe2$watch_queue(&(0x7f00000005c0), 0x80) (async) pipe2$watch_queue(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000780)={0x53, 0xfffffffffffffffe, 0xe, 0x7, @buffer={0x0, 0x64, &(0x7f0000000600)=""/100}, &(0x7f0000000680)="81ad491702cefe990d9334295498", &(0x7f00000006c0)=""/104, 0x4f, 0x14, 0xffffffffffffffff, &(0x7f0000000740)}) r5 = openat$incfs(r2, &(0x7f0000000340)='.pending_reads\x00', 0x0, 0x20) ioctl$SG_GET_LOW_DMA(r5, 0x227a, &(0x7f0000000540)) 15:29:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = getpgrp(0x0) sched_rr_get_interval(r2, &(0x7f0000000000)) (async) write$damon_target_ids(r1, &(0x7f0000000100)={@void, [{' ', r2}, {}, {' ', 0xffffffffffffffff}, {' ', 0xffffffffffffffff}]}, 0x54) 15:29:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800000026000100000000000000000002000000ed07fc30ecb5c4bd56dee00525866183d1f5a2b08dbb4c0ec84ab854763608fca087af8c56530fde6cdfc1bae9e87348732c5135492e", @ANYRES32=0x0], 0x18}}, 0x0) timer_create(0x6, &(0x7f0000000000)={0x0, 0x21, 0x4, @thr={&(0x7f0000000140)="1d6fd842543a6e59d2b1ade5aa50d763a2d0bca555b77a8c0fabdf05b8c5d460961d8fddf81d39eceda71e39105c763dcf520dcfb7dfaf48c9a29780769a47ddd0a1c0ab6d6c88f4ca33607fa36e723882d719b21ca1a582874dfbd2646fce865014fdb3e2f8a5cc748a04d2351de000386bb8af0c1b918a37bda0fd0a57b7e29943bd2eb5b54b90630d8f4ffd0108cb72354089db5850a8da033a03c042", &(0x7f0000000200)="bbfcf464f250e7d2185dfd96c561b2a67c6c7c2821cae4e20d9faf35204343488a192a0e1296b11c8e47f3943c744c9b3ddbed759548a4e6059aa71b5328dd0411702adc27f2d09bf5e249ba7858066274f5e8"}}, &(0x7f0000000100)) 15:29:42 executing program 4: socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:42 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000300)) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffe, 0x6, 0x45, @scatter={0x4, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/166, 0xa6}, {&(0x7f00000001c0)=""/166, 0xa6}, {&(0x7f0000000280)=""/49, 0x31}, {&(0x7f0000000440)=""/231, 0xe7}]}, &(0x7f0000000180)="9aff3c451634", 0x0, 0x0, 0x10003, 0x0, 0x0}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x10001, 0x4c0000) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r1) (async) pipe2$watch_queue(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000780)={0x53, 0xfffffffffffffffe, 0xe, 0x7, @buffer={0x0, 0x64, &(0x7f0000000600)=""/100}, &(0x7f0000000680)="81ad491702cefe990d9334295498", &(0x7f00000006c0)=""/104, 0x4f, 0x14, 0xffffffffffffffff, &(0x7f0000000740)}) (async) r5 = openat$incfs(r2, &(0x7f0000000340)='.pending_reads\x00', 0x0, 0x20) ioctl$SG_GET_LOW_DMA(r5, 0x227a, &(0x7f0000000540)) 15:29:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800000026000100000000000000000002000000ed07fc30ecb5c4bd56dee00525866183d1f5a2b08dbb4c0ec84ab854763608fca087af8c56530fde6cdfc1bae9e87348732c5135492e", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b435d", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = getpgrp(0x0) sched_rr_get_interval(r2, &(0x7f0000000000)) (async) write$damon_target_ids(r1, &(0x7f0000000100)={@void, [{' ', r2}, {}, {' ', 0xffffffffffffffff}, {' ', 0xffffffffffffffff}]}, 0x54) 15:29:42 executing program 4: socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:42 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x98d11b0b78290077, 0x81, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="10c2fe3a4242ede70e1c98120daed3c8850253daf63a2ef3b05bbbd0691d532d8d83c4804318fd47d1755ada0525e3c4902802b9a0e2f67ce49e69eb7539d8ae055dfa4558d6fc02a0492d910588b893ba0b21672cb5e8d735cfa1881268a607f6aff16568be08267546315e50bc41cf327e1d6284ac210143eb4b27d3a4831c28", 0x0, 0x0, 0x0, 0xfffffffc, 0x0}) 15:29:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000051}, 0x10) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f00000003c0)={&(0x7f0000000280), &(0x7f00000002c0)=""/231, 0xe7}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) 15:29:42 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800000026000100000000000000000002000000ed07fc30ecb5c4bd56dee00525866183d1f5a2b08dbb4c0ec84ab854763608fca087af8c56530fde6cdfc1bae9e87348732c5135492e", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b435dc2", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:42 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x4000)=nil) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x4) mlock(&(0x7f0000fe6000/0x3000)=nil, 0x3000) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1008000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000140001000000000000000000020000000a4dc849e30f62fba31118ca5a", @ANYRES32=0x0], 0x18}}, 0x80) 15:29:42 executing program 4: socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:42 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800000026000100000000000000000002000000ed07fc30ecb5c4bd56dee00525866183d1f5a2b08dbb4c0ec84ab854763608fca087af8c56530fde6cdfc1bae9e87348732c5135492e", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:42 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x98d11b0b78290077, 0x81, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="10c2fe3a4242ede70e1c98120daed3c8850253daf63a2ef3b05bbbd0691d532d8d83c4804318fd47d1755ada0525e3c4902802b9a0e2f67ce49e69eb7539d8ae055dfa4558d6fc02a0492d910588b893ba0b21672cb5e8d735cfa1881268a607f6aff16568be08267546315e50bc41cf327e1d6284ac210143eb4b27d3a4831c28", 0x0, 0x0, 0x0, 0xfffffffc, 0x0}) 15:29:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b435dc2", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:42 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, 0x0, 0x120) 15:29:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000051}, 0x10) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f00000003c0)={&(0x7f0000000280), &(0x7f00000002c0)=""/231, 0xe7}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) 15:29:42 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x98d11b0b78290077, 0x81, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="10c2fe3a4242ede70e1c98120daed3c8850253daf63a2ef3b05bbbd0691d532d8d83c4804318fd47d1755ada0525e3c4902802b9a0e2f67ce49e69eb7539d8ae055dfa4558d6fc02a0492d910588b893ba0b21672cb5e8d735cfa1881268a607f6aff16568be08267546315e50bc41cf327e1d6284ac210143eb4b27d3a4831c28", 0x0, 0x0, 0x0, 0xfffffffc, 0x0}) 15:29:42 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800000026000100000000000000000002000000ed07fc30ecb5c4bd56dee00525866183d1f5a2b08dbb4c0ec84ab854763608fca087af8c56530fde6cdfc1bae9e87348732c5135492e", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:42 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x4000)=nil) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x4) mlock(&(0x7f0000fe6000/0x3000)=nil, 0x3000) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1008000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000140001000000000000000000020000000a4dc849e30f62fba31118ca5a", @ANYRES32=0x0], 0x18}}, 0x80) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x4000)=nil) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x4) (async) mlock(&(0x7f0000fe6000/0x3000)=nil, 0x3000) (async) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3) (async) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1008000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000140001000000000000000000020000000a4dc849e30f62fba31118ca5a", @ANYRES32=0x0], 0x18}}, 0x80) (async) 15:29:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd2601c634edb5a510346eda96ad385e705ac482d6de1816f0a16115dd728a8345f4017b435dc2", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:42 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, 0x0, 0x120) 15:29:42 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000000)) 15:29:42 executing program 5: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800000026000100000000000000000002000000ed07fc30ecb5c4bd56dee00525866183d1f5a2b08dbb4c0ec84ab854763608fca087af8c56530fde6cdfc1bae9e87348732c5135492e", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000340), 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1808000014000100040000100000000002020000fa16ca73ae77d503e63ce2e0751b54964435e1d44766da07b2400051f53ec2fe50823ca6f5841f7eb513a9f99810e3a0b46ef404d92a58fdf41bf653d5cc4b9cd6d5948af297a7fa0e028dd0fea5581eafd5aebed49678e0791bcd2119a0261259f18bbd", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x40a000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file0\x00'}) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000440)="66baa100b817bb2db35c9a27000000e600ea7fe6d0274f00650f01c3b9f30200000f32660f3565660f38819d061a00000f20e035000040000f22e0b99f0300000f32dcf8", 0x44}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYRES64=r3, @ANYRESDEC=r2, @ANYRES8=r4, @ANYRES64=r4, @ANYRES32=r2, @ANYRESOCT=r0, @ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20000051}, 0x804) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000001400010000000075bf9699d9cda82629dce317080de82404000000000200000053de42d8bf7dcb0d327f769a5b9894d437930b2de98007e000736889ef238416dc7a83275979c1adc0a7fb9348baa21b28b6cde78ea72dc1ede709792691e78afef012542b37bcb8e992841a00420e89300eb6fa2c56ae9cfe75ff03a7f4fbe0d4c44690c1654c657fa15f260a723a3570fd9150f9ae86edae50f85cc3c482e178554a235c3fad2049a65429c076de909e78cca26496b2d366bc2b4ec3bff8a9c4ad96a21da8ad035205cfccd1f0a92db6df7a75f57af5a6d0", @ANYRES32=0x0], 0x18}}, 0x41) 15:29:42 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, 0x0, 0x120) 15:29:42 executing program 2: ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x40) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000000)) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)=0x3) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x8, 0x0, r1}, 0x80000001) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000080)={'exec ', '-*\x00'}, 0x8) 15:29:42 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x4000)=nil) (async, rerun: 64) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x4) (async, rerun: 32) mlock(&(0x7f0000fe6000/0x3000)=nil, 0x3000) (async, rerun: 64) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3) (async, rerun: 64) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1008000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000140001000000000000000000020000000a4dc849e30f62fba31118ca5a", @ANYRES32=0x0], 0x18}}, 0x80) 15:29:42 executing program 3: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000000)) 15:29:42 executing program 5: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800000026000100000000000000000002000000ed07fc30ecb5c4bd56dee00525866183d1f5a2b08dbb4c0ec84ab854763608fca087af8c56530fde6cdfc1bae9e87348732c5135492e", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:42 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000000)) 15:29:42 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:42 executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x40a000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file0\x00'}) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000440)="66baa100b817bb2db35c9a27000000e600ea7fe6d0274f00650f01c3b9f30200000f32660f3565660f38819d061a00000f20e035000040000f22e0b99f0300000f32dcf8", 0x44}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000440)="66baa100b817bb2db35c9a27000000e600ea7fe6d0274f00650f01c3b9f30200000f32660f3565660f38819d061a00000f20e035000040000f22e0b99f0300000f32dcf8", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYRES64=r3, @ANYRESDEC=r2, @ANYRES8=r4, @ANYRES64=r4, @ANYRES32=r2, @ANYRESOCT=r0, @ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20000051}, 0x804) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000001400010000000075bf9699d9cda82629dce317080de82404000000000200000053de42d8bf7dcb0d327f769a5b9894d437930b2de98007e000736889ef238416dc7a83275979c1adc0a7fb9348baa21b28b6cde78ea72dc1ede709792691e78afef012542b37bcb8e992841a00420e89300eb6fa2c56ae9cfe75ff03a7f4fbe0d4c44690c1654c657fa15f260a723a3570fd9150f9ae86edae50f85cc3c482e178554a235c3fad2049a65429c076de909e78cca26496b2d366bc2b4ec3bff8a9c4ad96a21da8ad035205cfccd1f0a92db6df7a75f57af5a6d0", @ANYRES32=0x0], 0x18}}, 0x41) 15:29:42 executing program 5: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800000026000100000000000000000002000000ed07fc30ecb5c4bd56dee00525866183d1f5a2b08dbb4c0ec84ab854763608fca087af8c56530fde6cdfc1bae9e87348732c5135492e", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000080)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000)) 15:29:42 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) ioctl$NBD_CLEAR_QUE(r1, 0xab05) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 15:29:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') bind$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x1d, 0x0, 0x2, {0x0, 0xf0, 0x3}, 0xfd}, 0x18) 15:29:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x2e44, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000240)="e327ee5dc2f7be584c0d14d972b40642a66ef03853b88c8f4596abe071e6c6b8164996b8079df8e163805de146d3ee1569cf81a7403cf447b6722c61d6c2f07ee2e60763b2659b7050df0bd5a4ee6592ab5baffbd5e930776dd458ac642c36c05155d2b18320c95b058fef0776d387106a9e543b1410fe8f5ce932fbb0e263f5cd8c1647f2dcefb8451510abc168aae99eecf3b00847413d4b7eabe519c6d7e51be462bb471e13037bd6a5642ec43fa9393363767670a54c01f21887430a522763c579268598391ab9075a529d25f9cdb1e681d883f4bbe0b60a59320b6a", 0xde}) r3 = openat$incfs(r1, &(0x7f0000000380)='.log\x00', 0x2201, 0x8) read$qrtrtun(r3, &(0x7f00000003c0)=""/165, 0xa5) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x0, 0x4012, r2, 0x8000000) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x30, 0x4004, @fd=r1, 0xfffffffffffffff9, &(0x7f0000000040)=[{&(0x7f0000000140)=""/154, 0x9a}], 0x1, 0x15, 0x1}, 0x101) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRES8=r0], 0x18}}, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) r5 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000480)=0x4bf3) socket$nl_route(0x10, 0x3, 0x0) 15:29:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x40a000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file0\x00'}) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000440)="66baa100b817bb2db35c9a27000000e600ea7fe6d0274f00650f01c3b9f30200000f32660f3565660f38819d061a00000f20e035000040000f22e0b99f0300000f32dcf8", 0x44}], 0x1, 0x0, 0x0, 0x0) (async) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r4 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYRES64=r3, @ANYRESDEC=r2, @ANYRES8=r4, @ANYRES64=r4, @ANYRES32=r2, @ANYRESOCT=r0, @ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20000051}, 0x804) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000001400010000000075bf9699d9cda82629dce317080de82404000000000200000053de42d8bf7dcb0d327f769a5b9894d437930b2de98007e000736889ef238416dc7a83275979c1adc0a7fb9348baa21b28b6cde78ea72dc1ede709792691e78afef012542b37bcb8e992841a00420e89300eb6fa2c56ae9cfe75ff03a7f4fbe0d4c44690c1654c657fa15f260a723a3570fd9150f9ae86edae50f85cc3c482e178554a235c3fad2049a65429c076de909e78cca26496b2d366bc2b4ec3bff8a9c4ad96a21da8ad035205cfccd1f0a92db6df7a75f57af5a6d0", @ANYRES32=0x0], 0x18}}, 0x41) 15:29:42 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) ioctl$NBD_CLEAR_QUE(r1, 0xab05) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 15:29:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') bind$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x1d, 0x0, 0x2, {0x0, 0xf0, 0x3}, 0xfd}, 0x18) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') (async) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x1d, 0x0, 0x2, {0x0, 0xf0, 0x3}, 0xfd}, 0x18) (async) 15:29:43 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x120) 15:29:43 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) ioctl$NBD_CLEAR_QUE(r1, 0xab05) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) (async) ioctl$NBD_CLEAR_QUE(r1, 0xab05) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 15:29:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 15:29:43 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0) read$qrtrtun(r0, &(0x7f00000001c0)=""/244, 0xf4) 15:29:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000014000080000000000100000002000000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') (async) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x1d, 0x0, 0x2, {0x0, 0xf0, 0x3}, 0xfd}, 0x18) 15:29:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000014000080000000000100000002000000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:43 executing program 2: r0 = socket(0x8, 0x80000, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000500)=[{}, {}], 0x10, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x10, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bind$can_j1939(r0, &(0x7f0000000280)={0x1d, r1, 0x0, {0x1, 0xff}, 0x1}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 15:29:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000001400010036e4ffffffffffff01000000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:43 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000000)={0x4, 0x8001, 0xffff7fff, "5b291796"}) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:43 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x120) 15:29:43 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 15:29:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000014000080000000000100000002000000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000001400010036e4ffffffffffff01000000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:43 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000000)={0x4, 0x8001, 0xffff7fff, "5b291796"}) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:43 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x120) 15:29:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000200), 0x4) recvmsg$can_j1939(r2, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getlink={0x28, 0x12, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x500, 0x40210}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x430}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 15:29:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000240)="0f205666b85b008ed0c744240000000000c744240200900000c7442406000000000f011c24c481f56c6137450f01f8c4a3f908e60067430f21ec66400f3839afa9e209a5c401e5d2c2b9890800000f32", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x1, 0xfff, 0xb, @loopback, @empty, 0x80, 0x40, 0x6, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', r2, 0x29, 0x8, 0xff, 0x1, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x20, 0x8, 0xffffffff, 0x1}}) 15:29:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000001400010036e4ffffffffffff01000000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:44 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000000)={0x4, 0x8001, 0xffff7fff, "5b291796"}) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:44 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}], 0x6}, 0x120) 15:29:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0) 15:29:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="0aa8767d561c225311659236030000140001002abd70001000007f", @ANYRES32=0x0], 0x18}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) 15:29:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000240)="0f205666b85b008ed0c744240000000000c744240200900000c7442406000000000f011c24c481f56c6137450f01f8c4a3f908e60067430f21ec66400f3839afa9e209a5c401e5d2c2b9890800000f32", 0x50}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x1, 0xfff, 0xb, @loopback, @empty, 0x80, 0x40, 0x6, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', r2, 0x29, 0x8, 0xff, 0x1, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x20, 0x8, 0xffffffff, 0x1}}) 15:29:44 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.log\x00', 0x0, 0x122) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @scatter={0x8, 0x0, &(0x7f0000001440)=[{&(0x7f0000000080)=""/53, 0x35}, {&(0x7f0000000100)=""/48, 0x30}, {&(0x7f00000001c0)=""/128, 0x80}, {&(0x7f0000000140)=""/41, 0x29}, {&(0x7f0000000340)=""/237, 0xed}, {&(0x7f0000000240)=""/62, 0x3e}, {&(0x7f0000000280)=""/41, 0x29}, {&(0x7f0000000440)=""/4096, 0x1000}]}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0) 15:29:44 executing program 1: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="0aa8767d561c225311659236030000140001002abd70001000007f", @ANYRES32=0x0], 0x18}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) 15:29:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000200), 0x4) recvmsg$can_j1939(r2, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getlink={0x28, 0x12, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x500, 0x40210}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x430}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async, rerun: 32) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000240)="0f205666b85b008ed0c744240000000000c744240200900000c7442406000000000f011c24c481f56c6137450f01f8c4a3f908e60067430f21ec66400f3839afa9e209a5c401e5d2c2b9890800000f32", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x1, 0xfff, 0xb, @loopback, @empty, 0x80, 0x40, 0x6, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', r2, 0x29, 0x8, 0xff, 0x1, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x20, 0x8, 0xffffffff, 0x1}}) 15:29:44 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.log\x00', 0x0, 0x122) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) (async) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @scatter={0x8, 0x0, &(0x7f0000001440)=[{&(0x7f0000000080)=""/53, 0x35}, {&(0x7f0000000100)=""/48, 0x30}, {&(0x7f00000001c0)=""/128, 0x80}, {&(0x7f0000000140)=""/41, 0x29}, {&(0x7f0000000340)=""/237, 0xed}, {&(0x7f0000000240)=""/62, 0x3e}, {&(0x7f0000000280)=""/41, 0x29}, {&(0x7f0000000440)=""/4096, 0x1000}]}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0) 15:29:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="0aa8767d561c225311659236030000140001002abd70001000007f", @ANYRES32=0x0], 0x18}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) 15:29:44 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}], 0x5}, 0x120) 15:29:44 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.log\x00', 0x0, 0x122) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) (async) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @scatter={0x8, 0x0, &(0x7f0000001440)=[{&(0x7f0000000080)=""/53, 0x35}, {&(0x7f0000000100)=""/48, 0x30}, {&(0x7f00000001c0)=""/128, 0x80}, {&(0x7f0000000140)=""/41, 0x29}, {&(0x7f0000000340)=""/237, 0xed}, {&(0x7f0000000240)=""/62, 0x3e}, {&(0x7f0000000280)=""/41, 0x29}, {&(0x7f0000000440)=""/4096, 0x1000}]}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800000026000100000000000000000002000000ed07fc30ecb5c4bd56dee00525866183d1f5a2b08dbb4c0ec84ab854763608fca087af8c56530fde6cdfc1bae9e87348732c5135492e"], 0x18}}, 0x0) 15:29:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0xff}, 0x8) 15:29:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') 15:29:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x18}}, 0x0) 15:29:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) getrusage(0x0, &(0x7f0000000080)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000140)={0x0, 0x0, 0x7ff, 0xe7, 0x100, 0x199d, 0x8, 0x949, 0x8, 0x2, 0xff, 0x1f}) 15:29:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000200), 0x4) recvmsg$can_j1939(r2, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getlink={0x28, 0x12, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x500, 0x40210}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x430}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0xff}, 0x8) 15:29:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') 15:29:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x18}}, 0x0) 15:29:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) getrusage(0x0, &(0x7f0000000080)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000140)={0x0, 0x0, 0x7ff, 0xe7, 0x100, 0x199d, 0x8, 0x949, 0x8, 0x2, 0xff, 0x1f}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000140)={0x0, 0x0, 0x7ff, 0xe7, 0x100, 0x199d, 0x8, 0x949, 0x8, 0x2, 0xff, 0x1f}) 15:29:45 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x4}, 0x120) 15:29:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x18}}, 0x0) 15:29:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0xff}, 0x8) 15:29:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) getrusage(0x0, &(0x7f0000000080)) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000140)={0x0, 0x0, 0x7ff, 0xe7, 0x100, 0x199d, 0x8, 0x949, 0x8, 0x2, 0xff, 0x1f}) 15:29:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') (async) 15:29:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x18}}, 0x0) 15:29:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000140001000000ad39cefc000002000000", @ANYRES32=0x0], 0x18}}, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) 15:29:46 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000200), 0x4) recvmsg$can_j1939(r1, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getlink={0x28, 0x12, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x500, 0x40210}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x430}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) 15:29:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x0, 0x0, 0x32, 0x80, @scatter={0x7, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/49, 0x31}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000100)=""/43, 0x2b}, {&(0x7f0000000140)=""/153, 0x99}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000200)=""/7, 0x7}, {&(0x7f0000000340)=""/220, 0xdc}]}, &(0x7f0000000000)="0600000086e1f6330cb188c38a8f2f020005002d3846a33abf668fc04e02f97b83c9dbb8008124ac2e3537f86e011bffff11", 0x0, 0xffffff00, 0x0, 0x0, 0x0}) 15:29:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$phonet(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x40, 0x83, 0x7}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x18}}, 0x0) 15:29:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000140001000000ad39cefc000002000000", @ANYRES32=0x0], 0x18}}, 0x0) (async) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) 15:29:46 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}], 0x3}, 0x120) 15:29:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) bind$phonet(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x40, 0x83, 0x7}, 0x10) (rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000140001000000ad39cefc000002000000", @ANYRES32=0x0], 0x18}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000140001000000ad39cefc000002000000", @ANYRES32=0x0], 0x18}}, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) 15:29:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x0, 0x0, 0x32, 0x80, @scatter={0x7, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/49, 0x31}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000100)=""/43, 0x2b}, {&(0x7f0000000140)=""/153, 0x99}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000200)=""/7, 0x7}, {&(0x7f0000000340)=""/220, 0xdc}]}, &(0x7f0000000000)="0600000086e1f6330cb188c38a8f2f020005002d3846a33abf668fc04e02f97b83c9dbb8008124ac2e3537f86e011bffff11", 0x0, 0xffffff00, 0x0, 0x0, 0x0}) 15:29:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x18}}, 0x0) 15:29:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800001c00000000000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x0, 0x0, 0x32, 0x80, @scatter={0x7, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/49, 0x31}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000100)=""/43, 0x2b}, {&(0x7f0000000140)=""/153, 0x99}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000200)=""/7, 0x7}, {&(0x7f0000000340)=""/220, 0xdc}]}, &(0x7f0000000000)="0600000086e1f6330cb188c38a8f2f020005002d3846a33abf668fc04e02f97b83c9dbb8008124ac2e3537f86e011bffff11", 0x0, 0xffffff00, 0x0, 0x0, 0x0}) 15:29:47 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000200), 0x4) recvmsg$can_j1939(r1, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/171, 0xab}], 0x7}, 0x120) 15:29:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800000026000100000000000000000002000000ed07fc30ecb5c4bd56dee00525866183d1"], 0x18}}, 0x0) 15:29:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$phonet(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x40, 0x83, 0x7}, 0x10) (async) bind$phonet(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x40, 0x83, 0x7}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800001c00000000000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x10011, 0x0, 0x0}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) 15:29:47 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000300)=""/55, 0x37}], 0x2}, 0x120) 15:29:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) 15:29:47 executing program 1: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800001c00000000000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x18}}, 0x0) 15:29:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x10011, 0x0, 0x0}) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) 15:29:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) (async) 15:29:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1800000e1438569750798aba0001000000570d4a27d5cf4a7886d61b40000053652ffbc76900", @ANYRES32=0x0], 0x18}}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xbb136d2e71a45590}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4080) 15:29:48 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000200), 0x4) 15:29:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x18}}, 0x0) 15:29:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x10011, 0x0, 0x0}) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) 15:29:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1800000e1438569750798aba0001000000570d4a27d5cf4a7886d61b40000053652ffbc76900", @ANYRES32=0x0], 0x18}}, 0x0) (async) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xbb136d2e71a45590}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4080) 15:29:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) 15:29:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffb, 0x90, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="a4f33c6516315093ab729e00e2637d6a5a2343f7e377cebbba21be9d48f79c7f4b65f88d9cc856028e672635bf54e546c5a5e5ef7a6c887890a29fa951570978834830d68e52360abb427d78ce4a5cf9d5c0ee29c7f290fae9c6be4ef25d665f1fe6f50a32de5dc1d9bfe10733de75314c34909ac8bed4a01065413538c3577dc11dceb2ac6809cb2c97bc5ca0f136ff", 0x0, 0x3, 0x0, 0x3, 0x0}) 15:29:48 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}], 0x1}, 0x120) 15:29:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x4579, &(0x7f0000000100)={0x0, 0xc067, 0x10, 0x0, 0x20a}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x18}}, 0x0) 15:29:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1800000e1438569750798aba0001000000570d4a27d5cf4a7886d61b40000053652ffbc76900", @ANYRES32=0x0], 0x18}}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xbb136d2e71a45590}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4080) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1800000e1438569750798aba0001000000570d4a27d5cf4a7886d61b40000053652ffbc76900", @ANYRES32=0x0], 0x18}}, 0x0) (async) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xbb136d2e71a45590}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4080) (async) 15:29:48 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000200), 0x4) 15:29:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffb, 0x90, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="a4f33c6516315093ab729e00e2637d6a5a2343f7e377cebbba21be9d48f79c7f4b65f88d9cc856028e672635bf54e546c5a5e5ef7a6c887890a29fa951570978834830d68e52360abb427d78ce4a5cf9d5c0ee29c7f290fae9c6be4ef25d665f1fe6f50a32de5dc1d9bfe10733de75314c34909ac8bed4a01065413538c3577dc11dceb2ac6809cb2c97bc5ca0f136ff", 0x0, 0x3, 0x0, 0x3, 0x0}) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffb, 0x90, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="a4f33c6516315093ab729e00e2637d6a5a2343f7e377cebbba21be9d48f79c7f4b65f88d9cc856028e672635bf54e546c5a5e5ef7a6c887890a29fa951570978834830d68e52360abb427d78ce4a5cf9d5c0ee29c7f290fae9c6be4ef25d665f1fe6f50a32de5dc1d9bfe10733de75314c34909ac8bed4a01065413538c3577dc11dceb2ac6809cb2c97bc5ca0f136ff", 0x0, 0x3, 0x0, 0x3, 0x0}) (async) 15:29:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000100)) 15:29:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000260001000000000000000000020000"], 0x18}}, 0x0) 15:29:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x4579, &(0x7f0000000100)={0x0, 0xc067, 0x10, 0x0, 0x20a}) (async) io_uring_setup(0x4579, &(0x7f0000000100)={0x0, 0xc067, 0x10, 0x0, 0x20a}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:48 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000200), 0x4) 15:29:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffb, 0x90, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="a4f33c6516315093ab729e00e2637d6a5a2343f7e377cebbba21be9d48f79c7f4b65f88d9cc856028e672635bf54e546c5a5e5ef7a6c887890a29fa951570978834830d68e52360abb427d78ce4a5cf9d5c0ee29c7f290fae9c6be4ef25d665f1fe6f50a32de5dc1d9bfe10733de75314c34909ac8bed4a01065413538c3577dc11dceb2ac6809cb2c97bc5ca0f136ff", 0x0, 0x3, 0x0, 0x3, 0x0}) 15:29:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="18"], 0x18}}, 0x0) 15:29:49 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001640)}, 0x120) 15:29:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async, rerun: 32) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000100)) 15:29:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000080)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x19) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x4579, &(0x7f0000000100)={0x0, 0xc067, 0x10, 0x0, 0x20a}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="18"], 0x18}}, 0x0) 15:29:49 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000200), 0x4) 15:29:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="18"], 0x18}}, 0x0) 15:29:49 executing program 2: socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200), 0x4) 15:29:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000100)) (async) 15:29:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000080)) (async, rerun: 32) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x19) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}]}, 0x4c}, 0x1, 0x0, 0x0, 0x60}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) execveat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=[&(0x7f0000000100)='@@\x00'], &(0x7f00000001c0)=[&(0x7f0000000180)=')\x00'], 0x800) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:49 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001640)}, 0x120) 15:29:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000260001000000"], 0x18}}, 0x0) 15:29:49 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200), 0x4) 15:29:49 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001640)}, 0x120) 15:29:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}]}, 0x4c}, 0x1, 0x0, 0x0, 0x60}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) execveat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=[&(0x7f0000000100)='@@\x00'], &(0x7f00000001c0)=[&(0x7f0000000180)=')\x00'], 0x800) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x0, 0x1a, 0x8, 0x70bd25, 0x25dfdbfd, {0xa, 0x14, 0x10, 0x81, 0x0, 0x3, 0xff, 0xb, 0x1d00}, [@RTA_IIF, @RTA_EXPIRES]}, 0x18}}, 0x0) 15:29:49 executing program 2: r0 = socket(0x1e, 0x2, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200), 0x4) 15:29:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000080)) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x19) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000260001000000"], 0x18}}, 0x0) 15:29:49 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001640)=[{0x0}], 0x1}, 0x120) 15:29:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x0, 0x1a, 0x8, 0x70bd25, 0x25dfdbfd, {0xa, 0x14, 0x10, 0x81, 0x0, 0x3, 0xff, 0xb, 0x1d00}, [@RTA_IIF, @RTA_EXPIRES]}, 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x0, 0x1a, 0x8, 0x70bd25, 0x25dfdbfd, {0xa, 0x14, 0x10, 0x81, 0x0, 0x3, 0xff, 0xb, 0x1d00}, [@RTA_IIF, @RTA_EXPIRES]}, 0x18}}, 0x0) (async) 15:29:49 executing program 2: r0 = socket(0x0, 0x2, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200), 0x4) 15:29:49 executing program 3: pipe2$watch_queue(&(0x7f0000000000), 0x80) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000260001000000"], 0x18}}, 0x0) 15:29:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000002600010000000000000000"], 0x18}}, 0x0) 15:29:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x0, 0x1a, 0x8, 0x70bd25, 0x25dfdbfd, {0xa, 0x14, 0x10, 0x81, 0x0, 0x3, 0xff, 0xb, 0x1d00}, [@RTA_IIF, @RTA_EXPIRES]}, 0x18}}, 0x0) 15:29:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}]}, 0x4c}, 0x1, 0x0, 0x0, 0x60}, 0x0) (rerun: 64) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) execveat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=[&(0x7f0000000100)='@@\x00'], &(0x7f00000001c0)=[&(0x7f0000000180)=')\x00'], 0x800) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:50 executing program 3: pipe2$watch_queue(&(0x7f0000000000), 0x80) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 15:29:50 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001640)=[{0x0}], 0x1}, 0x120) 15:29:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000140001000000000000000000020000005770ac11138bea334c3ba68298efbacac61178a965ffce449d65df3ee710f7d84d02d9b519a73db1b6781190279dac17", @ANYRES32=0x0], 0x18}}, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) 15:29:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000002600010000000000000000"], 0x18}}, 0x0) 15:29:50 executing program 2: r0 = socket(0x0, 0x2, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200), 0x4) 15:29:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000002600010000000000000000"], 0x18}}, 0x0) 15:29:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000140001000000000000000000020000005770ac11138bea334c3ba68298efbacac61178a965ffce449d65df3ee710f7d84d02d9b519a73db1b6781190279dac17", @ANYRES32=0x0], 0x18}}, 0x0) (async) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) 15:29:50 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001640)=[{0x0}], 0x1}, 0x120) 15:29:50 executing program 3: pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:50 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/61, 0x3d}], 0x1}, 0x0) 15:29:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000140001000000000000000000020000005770ac11138bea334c3ba68298efbacac61178a965ffce449d65df3ee710f7d84d02d9b519a73db1b6781190279dac17", @ANYRES32=0x0], 0x18}}, 0x0) (async) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) 15:29:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}]}, 0x4c}, 0x1, 0x0, 0x0, 0x60}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) execveat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=[&(0x7f0000000100)='@@\x00'], &(0x7f00000001c0)=[&(0x7f0000000180)=')\x00'], 0x800) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800000026000100000000000000000002"], 0x18}}, 0x0) 15:29:50 executing program 3: r0 = socket(0x1e, 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001640)=[{0x0}], 0x1}, 0x120) 15:29:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000002600010000000000000000"], 0x18}}, 0x0) 15:29:50 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.log\x00', 0x0, 0x122) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @scatter={0x8, 0x0, &(0x7f0000001440)=[{&(0x7f0000000080)=""/53, 0x35}, {&(0x7f0000000100)=""/48, 0x30}, {&(0x7f00000001c0)=""/128, 0x80}, {&(0x7f0000000140)=""/41, 0x29}, {&(0x7f0000000340)=""/237, 0xed}, {&(0x7f0000000240)=""/62, 0x3e}, {&(0x7f0000000280)=""/41, 0x29}, {&(0x7f0000000440)=""/4096, 0x1000}]}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:50 executing program 2: r0 = socket(0x0, 0x2, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200), 0x4) 15:29:50 executing program 1: mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000100)=0x9, 0x6, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000040)='.log\x00', 0x90000, 0x100) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x7) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x4000) r3 = syz_io_uring_setup(0xd4, &(0x7f0000000180)={0x0, 0xc33f, 0x800, 0x2, 0x178, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000c, 0x100010, r3, 0x8000000) 15:29:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000002600010000000000000000"], 0x18}}, 0x0) 15:29:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xfe, 0x200000) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) 15:29:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xfe, 0x200000) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) 15:29:51 executing program 2: r0 = socket(0x1e, 0x0, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200), 0x4) 15:29:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000002600010000000000000000"], 0x18}}, 0x0) 15:29:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xfe, 0x200000) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) 15:29:51 executing program 1: mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000100)=0x9, 0x6, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000040)='.log\x00', 0x90000, 0x100) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x7) (async) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x7) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x4000) r3 = syz_io_uring_setup(0xd4, &(0x7f0000000180)={0x0, 0xc33f, 0x800, 0x2, 0x178, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000c, 0x100010, r3, 0x8000000) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000c, 0x100010, r3, 0x8000000) 15:29:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x17, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:51 executing program 4: mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000100)=0x9, 0x6, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000040)='.log\x00', 0x90000, 0x100) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x7) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x4000) r3 = syz_io_uring_setup(0xd4, &(0x7f0000000180)={0x0, 0xc33f, 0x800, 0x2, 0x178, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000c, 0x100010, r3, 0x8000000) 15:29:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000260001000000000000000000"], 0x18}}, 0x0) 15:29:51 executing program 2: r0 = socket(0x1e, 0x0, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200), 0x4) 15:29:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x17, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:51 executing program 1: mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000100)=0x9, 0x6, 0x0) (async, rerun: 64) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000040)='.log\x00', 0x90000, 0x100) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x7) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x4000) (async) r3 = syz_io_uring_setup(0xd4, &(0x7f0000000180)={0x0, 0xc33f, 0x800, 0x2, 0x178, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000c, 0x100010, r3, 0x8000000) 15:29:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xfe, 0x200000) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) 15:29:51 executing program 2: r0 = socket(0x1e, 0x0, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200), 0x4) 15:29:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) syz_open_dev$sg(&(0x7f0000000000), 0xfe, 0x200000) 15:29:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000260001000000000000000000"], 0x18}}, 0x0) 15:29:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x17, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x40086602, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:51 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x17, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:51 executing program 2: socket(0x1e, 0x2, 0x0) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000200), 0x4) 15:29:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) syz_io_uring_setup(0x2f8, &(0x7f0000000100)={0x0, 0xec4e, 0x1, 0x0, 0x1d0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x18, 0x2000, @fd=r0, 0x20, &(0x7f0000000200)=""/124, 0x7c, 0x18, 0x1}, 0x3) 15:29:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000260001000000000000000000"], 0x18}}, 0x0) 15:29:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 15:29:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x40086602, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x10, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:51 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x17, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:51 executing program 2: socket(0x1e, 0x2, 0x0) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000200), 0x4) 15:29:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) syz_io_uring_setup(0x2f8, &(0x7f0000000100)={0x0, 0xec4e, 0x1, 0x0, 0x1d0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x18, 0x2000, @fd=r0, 0x20, &(0x7f0000000200)=""/124, 0x7c, 0x18, 0x1}, 0x3) 15:29:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:51 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x17, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x10, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x40086602, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:51 executing program 2: socket(0x1e, 0x2, 0x0) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000200), 0x4) 15:29:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) syz_io_uring_setup(0x2f8, &(0x7f0000000100)={0x0, 0xec4e, 0x1, 0x0, 0x1d0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x18, 0x2000, @fd=r0, 0x20, &(0x7f0000000200)=""/124, 0x7c, 0x18, 0x1}, 0x3) 15:29:51 executing program 0: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:51 executing program 3: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x17, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:51 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x40086602, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:51 executing program 2: r0 = socket(0x1e, 0x2, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0x0, 0x0) 15:29:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x10, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:51 executing program 3: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x17, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:51 executing program 0: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:51 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x40086602, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0x7, 0x80c0) r2 = openat$incfs(r1, &(0x7f0000000580)='.pending_reads\x00', 0x204280, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@ipmr_delroute={0x24, 0x19, 0x300, 0x70bd2a, 0x25dfdbfd, {0x80, 0x10, 0x14, 0x3, 0xfe, 0x1, 0x0, 0xa}, [@RTA_PREFSRC={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x2044840}, 0x40800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x908, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2404c081) r4 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000003, 0x2010, r4, 0x9e4) 15:29:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x9}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:51 executing program 3: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x17, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:51 executing program 0: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:51 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x10, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:51 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x40086602, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0x7, 0x80c0) r2 = openat$incfs(r1, &(0x7f0000000580)='.pending_reads\x00', 0x204280, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@ipmr_delroute={0x24, 0x19, 0x300, 0x70bd2a, 0x25dfdbfd, {0x80, 0x10, 0x14, 0x3, 0xfe, 0x1, 0x0, 0xa}, [@RTA_PREFSRC={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x2044840}, 0x40800) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x908, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2404c081) (async) r4 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000003, 0x2010, r4, 0x9e4) (rerun: 32) 15:29:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 15:29:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:51 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:51 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x10, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:52 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x40086602, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 15:29:52 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:52 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x10, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:52 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x40086602, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:52 executing program 5: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x10, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0x7, 0x80c0) r2 = openat$incfs(r1, &(0x7f0000000580)='.pending_reads\x00', 0x204280, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@ipmr_delroute={0x24, 0x19, 0x300, 0x70bd2a, 0x25dfdbfd, {0x80, 0x10, 0x14, 0x3, 0xfe, 0x1, 0x0, 0xa}, [@RTA_PREFSRC={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x2044840}, 0x40800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x908, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2404c081) r4 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000003, 0x2010, r4, 0x9e4) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000100), 0x7, 0x80c0) (async) openat$incfs(r1, &(0x7f0000000580)='.pending_reads\x00', 0x204280, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@ipmr_delroute={0x24, 0x19, 0x300, 0x70bd2a, 0x25dfdbfd, {0x80, 0x10, 0x14, 0x3, 0xfe, 0x1, 0x0, 0xa}, [@RTA_PREFSRC={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x2044840}, 0x40800) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) (async) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x908, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2404c081) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000003, 0x2010, r4, 0x9e4) (async) 15:29:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 15:29:52 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:52 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x40086602, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:52 executing program 5: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x10, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 15:29:52 executing program 5: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x10, 0x14, 0x1, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:52 executing program 0: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:52 executing program 4: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x40086602, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:52 executing program 4: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x40086602, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 15:29:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 15:29:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x850) 15:29:52 executing program 0: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:52 executing program 2: ioctl$SG_IO(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 15:29:52 executing program 0: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:52 executing program 4: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x40086602, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 15:29:52 executing program 2: ioctl$SG_IO(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x850) 15:29:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x40086602, 0x0) 15:29:52 executing program 2: ioctl$SG_IO(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 15:29:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 15:29:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 15:29:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x850) 15:29:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x40086602, 0x0) 15:29:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 15:29:52 executing program 2: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 15:29:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 15:29:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x2c, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x0, 0x5, 0x80000001}}]}, 0x2c}}, 0x40) 15:29:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 15:29:52 executing program 2: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x40086602, 0x0) 15:29:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 15:29:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 15:29:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x2c, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x0, 0x5, 0x80000001}}]}, 0x2c}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x2c, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x0, 0x5, 0x80000001}}]}, 0x2c}}, 0x40) (async) 15:29:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x17, 0x14, 0x0, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x40086602, &(0x7f00000002c0)={0x0, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:52 executing program 2: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 15:29:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x17, 0x14, 0x0, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:53 executing program 2: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x40086602, &(0x7f00000002c0)={0x0, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x2c, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x0, 0x5, 0x80000001}}]}, 0x2c}}, 0x40) 15:29:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 15:29:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x17, 0x14, 0x0, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:53 executing program 2: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x40086602, &(0x7f00000002c0)={0x0, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2344.544516][ T1212] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.550902][ T1212] ieee802154 phy1 wpan1: encryption failed: -22 15:29:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x17, 0x14, 0x1}, 0x18}}, 0x0) 15:29:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x40086602, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 15:29:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000052fe0881f3caa8bd4d66cef05bf2ee57467e4f9c6f8d83e9e5535b3166a2af9045b35eaf3732883480d31ce00aab4e8f9628d011c6994aa548b1360997c4ef3e9cffd5f5d082ac1b396cb84151835a01d47be4048e0ebdfafd331015be03c78c63b6c42fba1841d3eafbb450d65f3c766d9862ce0980a8a5f9dcb801aaa576daf34b3b651f724ac6ceafa6b5a53cbb53659c11215126c175", @ANYRES32=0x0, @ANYBLOB="e0336af596fda117eb1268"], 0x24}}, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.log\x00', 0x0, 0x4) sendmsg$can_j1939(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x1d, 0x0, 0x1, {0x0, 0x0, 0x2}, 0xfc}, 0x18, &(0x7f0000000280)={&(0x7f0000000180)="3f991ce8cb21c6b396ba7935cbfd5b8ce3efca04e160697acb1f93dab8cdf1fa16c2dfa997ed6cca53b64e90195f8eadbd82f775f41ca61544ca8e321fa31870e8467b2b3dbef44a363fef962feeba21afcf56816818dfdc27a968b0544658dd9f9664399d9cc6a71fa0a74986e110747c5e879151d76a899fe9d266ac156086dcf4d81ebc9411219c99a02a1bacece665a0d3963b84199e849f9fd8a023afcf2b6a5fa6c508b6ef8ee67e04660dcba7cda58906d4d511dd3d1139a97eea000e349eea689e174b661d7c539811e725ac63cfe7792b98a111dd3703ee20a5827505064f26", 0xe4}}, 0x40008c0) 15:29:53 executing program 2: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000052fe0881f3caa8bd4d66cef05bf2ee57467e4f9c6f8d83e9e5535b3166a2af9045b35eaf3732883480d31ce00aab4e8f9628d011c6994aa548b1360997c4ef3e9cffd5f5d082ac1b396cb84151835a01d47be4048e0ebdfafd331015be03c78c63b6c42fba1841d3eafbb450d65f3c766d9862ce0980a8a5f9dcb801aaa576daf34b3b651f724ac6ceafa6b5a53cbb53659c11215126c175", @ANYRES32=0x0, @ANYBLOB="e0336af596fda117eb1268"], 0x24}}, 0x0) (async) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.log\x00', 0x0, 0x4) sendmsg$can_j1939(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x1d, 0x0, 0x1, {0x0, 0x0, 0x2}, 0xfc}, 0x18, &(0x7f0000000280)={&(0x7f0000000180)="3f991ce8cb21c6b396ba7935cbfd5b8ce3efca04e160697acb1f93dab8cdf1fa16c2dfa997ed6cca53b64e90195f8eadbd82f775f41ca61544ca8e321fa31870e8467b2b3dbef44a363fef962feeba21afcf56816818dfdc27a968b0544658dd9f9664399d9cc6a71fa0a74986e110747c5e879151d76a899fe9d266ac156086dcf4d81ebc9411219c99a02a1bacece665a0d3963b84199e849f9fd8a023afcf2b6a5fa6c508b6ef8ee67e04660dcba7cda58906d4d511dd3d1139a97eea000e349eea689e174b661d7c539811e725ac63cfe7792b98a111dd3703ee20a5827505064f26", 0xe4}}, 0x40008c0) 15:29:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 15:29:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, 0x0) 15:29:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x10, 0x14, 0x0, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000052fe0881f3caa8bd4d66cef05bf2ee57467e4f9c6f8d83e9e5535b3166a2af9045b35eaf3732883480d31ce00aab4e8f9628d011c6994aa548b1360997c4ef3e9cffd5f5d082ac1b396cb84151835a01d47be4048e0ebdfafd331015be03c78c63b6c42fba1841d3eafbb450d65f3c766d9862ce0980a8a5f9dcb801aaa576daf34b3b651f724ac6ceafa6b5a53cbb53659c11215126c175", @ANYRES32=0x0, @ANYBLOB="e0336af596fda117eb1268"], 0x24}}, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.log\x00', 0x0, 0x4) (async) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.log\x00', 0x0, 0x4) sendmsg$can_j1939(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x1d, 0x0, 0x1, {0x0, 0x0, 0x2}, 0xfc}, 0x18, &(0x7f0000000280)={&(0x7f0000000180)="3f991ce8cb21c6b396ba7935cbfd5b8ce3efca04e160697acb1f93dab8cdf1fa16c2dfa997ed6cca53b64e90195f8eadbd82f775f41ca61544ca8e321fa31870e8467b2b3dbef44a363fef962feeba21afcf56816818dfdc27a968b0544658dd9f9664399d9cc6a71fa0a74986e110747c5e879151d76a899fe9d266ac156086dcf4d81ebc9411219c99a02a1bacece665a0d3963b84199e849f9fd8a023afcf2b6a5fa6c508b6ef8ee67e04660dcba7cda58906d4d511dd3d1139a97eea000e349eea689e174b661d7c539811e725ac63cfe7792b98a111dd3703ee20a5827505064f26", 0xe4}}, 0x40008c0) 15:29:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, 0x0) 15:29:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x10, 0x14, 0x0, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2100000014000100002dac2cd30000000000000002000000c83022afde9a994619e4479e5178e9ce2a2da167554c6cc7686b170d7d261558dbdcf17f3ed8a16e1a94047399d2ae7c1a19d30d7de036f931f85e923bd7e09a3989c72bf980a110872d33ef77316740932c2ac1aa", @ANYRES32=0x0], 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) r2 = socket(0x27, 0x800, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) 15:29:53 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, 0x0) 15:29:53 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2275, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x10, 0x14, 0x0, 0x0, 0x0, {0x2, 0x38}}, 0x18}}, 0x0) 15:29:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x0, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2275, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2100000014000100002dac2cd30000000000000002000000c83022afde9a994619e4479e5178e9ce2a2da167554c6cc7686b170d7d261558dbdcf17f3ed8a16e1a94047399d2ae7c1a19d30d7de036f931f85e923bd7e09a3989c72bf980a110872d33ef77316740932c2ac1aa", @ANYRES32=0x0], 0x18}}, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) (async) r2 = socket(0x27, 0x800, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) 15:29:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x10, 0x14, 0x1}, 0x18}}, 0x0) 15:29:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x0, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2275, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2100000014000100002dac2cd30000000000000002000000c83022afde9a994619e4479e5178e9ce2a2da167554c6cc7686b170d7d261558dbdcf17f3ed8a16e1a94047399d2ae7c1a19d30d7de036f931f85e923bd7e09a3989c72bf980a110872d33ef77316740932c2ac1aa", @ANYRES32=0x0], 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) r2 = socket(0x27, 0x800, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2100000014000100002dac2cd30000000000000002000000c83022afde9a994619e4479e5178e9ce2a2da167554c6cc7686b170d7d261558dbdcf17f3ed8a16e1a94047399d2ae7c1a19d30d7de036f931f85e923bd7e09a3989c72bf980a110872d33ef77316740932c2ac1aa", @ANYRES32=0x0], 0x18}}, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) (async) socket(0x27, 0x800, 0x8) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) (async) 15:29:53 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x0, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:53 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x193880, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000001400010000000a1a0000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:53 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:54 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x193880, 0x10) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000001400010000000a1a0000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:54 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:54 executing program 3: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:54 executing program 1: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x193880, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000001400010000000a1a0000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x3, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:54 executing program 4: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2275, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:54 executing program 3: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="181300000000000000405aaefba21e3e06178a3c6618740b1d33b49e223b9f6c43ff8c5157203efe283fd96f3b1a2d681e677388a665bc4bb0c5783591a98e34bb7ad9b865a61ce739268f4189cc3296e568056fcadc60188c6ca7d96f9672316e5f50c81e310f1f500000000000000000000028f2ddbc344af6a40af1c2a630134c6e37bc5f303df9c52676b75e2e48f63f993a78d2e23e293d80447e62c9", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 1) 15:29:54 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x3, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:54 executing program 4: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2275, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:54 executing program 3: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="181300000000000000405aaefba21e3e06178a3c6618740b1d33b49e223b9f6c43ff8c5157203efe283fd96f3b1a2d681e677388a665bc4bb0c5783591a98e34bb7ad9b865a61ce739268f4189cc3296e568056fcadc60188c6ca7d96f9672316e5f50c81e310f1f500000000000000000000028f2ddbc344af6a40af1c2a630134c6e37bc5f303df9c52676b75e2e48f63f993a78d2e23e293d80447e62c9", @ANYRES32=0x0], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="181300000000000000405aaefba21e3e06178a3c6618740b1d33b49e223b9f6c43ff8c5157203efe283fd96f3b1a2d681e677388a665bc4bb0c5783591a98e34bb7ad9b865a61ce739268f4189cc3296e568056fcadc60188c6ca7d96f9672316e5f50c81e310f1f500000000000000000000028f2ddbc344af6a40af1c2a630134c6e37bc5f303df9c52676b75e2e48f63f993a78d2e23e293d80447e62c9", @ANYRES32=0x0], 0x18}}, 0x0) (async) 15:29:54 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:54 executing program 4: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2275, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x3, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2345.738290][T12868] FAULT_INJECTION: forcing a failure. [ 2345.738290][T12868] name failslab, interval 1, probability 0, space 0, times 0 [ 2345.808386][T12868] CPU: 1 PID: 12868 Comm: syz-executor.2 Not tainted 6.2.0-syzkaller-12765-g982818426a0f #0 [ 2345.818576][T12868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2345.828735][T12868] Call Trace: [ 2345.832108][T12868] [ 2345.835086][T12868] dump_stack_lvl+0x136/0x150 [ 2345.839842][T12868] should_fail_ex+0x4a3/0x5b0 [ 2345.844614][T12868] should_failslab+0x9/0x20 [ 2345.849174][T12868] __kmem_cache_alloc_node+0x5b/0x330 [ 2345.854614][T12868] ? tomoyo_realpath_from_path+0xc3/0x600 [ 2345.860404][T12868] ? tomoyo_realpath_from_path+0xc3/0x600 [ 2345.866195][T12868] __kmalloc+0x4a/0xd0 [ 2345.870322][T12868] tomoyo_realpath_from_path+0xc3/0x600 [ 2345.876110][T12868] ? tomoyo_profile+0x46/0x60 [ 2345.880866][T12868] tomoyo_path_number_perm+0x217/0x570 [ 2345.886383][T12868] ? tomoyo_path_number_perm+0x1c1/0x570 [ 2345.892253][T12868] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2345.898160][T12868] ? wait_for_completion_io_timeout+0x20/0x20 [ 2345.904330][T12868] ? __fget_files+0x26a/0x480 15:29:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, 0x0) 15:29:54 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:54 executing program 5: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) [ 2345.909070][T12868] security_file_ioctl+0x54/0xb0 [ 2345.914074][T12868] __x64_sys_ioctl+0xb7/0x210 [ 2345.918840][T12868] do_syscall_64+0x39/0xb0 [ 2345.923319][T12868] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2345.929279][T12868] RIP: 0033:0x7f0b0048c0f9 [ 2345.933734][T12868] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2345.953390][T12868] RSP: 002b:00007f0b0126d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2345.961854][T12868] RAX: ffffffffffffffda RBX: 00007f0b005abf80 RCX: 00007f0b0048c0f9 [ 2345.970220][T12868] RDX: 00000000200002c0 RSI: 0000000000005452 RDI: 0000000000000003 [ 2345.978255][T12868] RBP: 00007f0b0126d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2345.986269][T12868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2345.994287][T12868] R13: 00007f0b006cfb1f R14: 00007f0b0126d300 R15: 0000000000022000 [ 2346.002320][T12868] 15:29:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 2) 15:29:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, 0x0) 15:29:54 executing program 1: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="181300000000000000405aaefba21e3e06178a3c6618740b1d33b49e223b9f6c43ff8c5157203efe283fd96f3b1a2d681e677388a665bc4bb0c5783591a98e34bb7ad9b865a61ce739268f4189cc3296e568056fcadc60188c6ca7d96f9672316e5f50c81e310f1f500000000000000000000028f2ddbc344af6a40af1c2a630134c6e37bc5f303df9c52676b75e2e48f63f993a78d2e23e293d80447e62c9", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, 0x0) 15:29:54 executing program 5: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x5, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c4516", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2346.051387][T12868] ERROR: Out of memory at tomoyo_realpath_from_path. 15:29:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, 0x0) 15:29:54 executing program 5: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, 0x0) 15:29:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x5, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c4516", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0xe2f}, 0x14}}, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x34, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000002c0)=0xc) r7 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r8 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x140, r3, 0x200, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x140}, 0x1, 0x0, 0x0, 0x80}, 0xc010) r9 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c5e58cc5220c86cccbd70000d0500000a00020032000000efff03000000000008080500657df066b9e954165f6d33aab2a9360da2676b1c1e307c", @ANYRES32=0x0, @ANYBLOB="0c00088008000400350000000400040024000c8008000300ff07000006000100020000000800020007000000080002003f000000"], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x48080) [ 2346.188513][T12905] FAULT_INJECTION: forcing a failure. [ 2346.188513][T12905] name failslab, interval 1, probability 0, space 0, times 0 15:29:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2346.255366][T12905] CPU: 0 PID: 12905 Comm: syz-executor.2 Not tainted 6.2.0-syzkaller-12765-g982818426a0f #0 [ 2346.265517][T12905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2346.275709][T12905] Call Trace: [ 2346.279025][T12905] [ 2346.281994][T12905] dump_stack_lvl+0x136/0x150 [ 2346.286736][T12905] should_fail_ex+0x4a3/0x5b0 [ 2346.291477][T12905] should_failslab+0x9/0x20 [ 2346.296038][T12905] __kmem_cache_alloc_node+0x5b/0x330 [ 2346.301469][T12905] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 2346.306911][T12905] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 2346.312350][T12905] __kmalloc+0x4a/0xd0 [ 2346.316483][T12905] tomoyo_encode2.part.0+0xe9/0x3a0 [ 2346.321748][T12905] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2346.327449][T12905] tomoyo_encode+0x2c/0x50 [ 2346.331951][T12905] tomoyo_realpath_from_path+0x185/0x600 [ 2346.337661][T12905] tomoyo_path_number_perm+0x217/0x570 [ 2346.343193][T12905] ? tomoyo_path_number_perm+0x1c1/0x570 [ 2346.348891][T12905] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2346.354815][T12905] ? wait_for_completion_io_timeout+0x20/0x20 [ 2346.360966][T12905] ? __fget_files+0x26a/0x480 [ 2346.365700][T12905] security_file_ioctl+0x54/0xb0 [ 2346.370704][T12905] __x64_sys_ioctl+0xb7/0x210 [ 2346.375472][T12905] do_syscall_64+0x39/0xb0 [ 2346.379947][T12905] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2346.385902][T12905] RIP: 0033:0x7f0b0048c0f9 [ 2346.390388][T12905] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2346.410039][T12905] RSP: 002b:00007f0b0126d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2346.418497][T12905] RAX: ffffffffffffffda RBX: 00007f0b005abf80 RCX: 00007f0b0048c0f9 [ 2346.426539][T12905] RDX: 00000000200002c0 RSI: 0000000000005452 RDI: 0000000000000003 [ 2346.434554][T12905] RBP: 00007f0b0126d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2346.442563][T12905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 15:29:55 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 3) 15:29:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x5, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c4516", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0xe2f}, 0x14}}, 0x0) (async) r4 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) r5 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x34, 0x0, 0x0) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000002c0)=0xc) r7 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r8 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x140, r3, 0x200, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x140}, 0x1, 0x0, 0x0, 0x80}, 0xc010) (async) r9 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c5e58cc5220c86cccbd70000d0500000a00020032000000efff03000000000008080500657df066b9e954165f6d33aab2a9360da2676b1c1e307c", @ANYRES32=0x0, @ANYBLOB="0c00088008000400350000000400040024000c8008000300ff07000006000100020000000800020007000000080002003f000000"], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x48080) 15:29:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 15:29:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, 0x0) [ 2346.450584][T12905] R13: 00007f0b006cfb1f R14: 00007f0b0126d300 R15: 0000000000022000 [ 2346.458795][T12905] [ 2346.495876][T12905] ERROR: Out of memory at tomoyo_realpath_from_path. 15:29:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 15:29:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 1) 15:29:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x0, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 1) 15:29:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 2346.614896][T12931] FAULT_INJECTION: forcing a failure. [ 2346.614896][T12931] name failslab, interval 1, probability 0, space 0, times 0 [ 2346.648484][T12938] FAULT_INJECTION: forcing a failure. [ 2346.648484][T12938] name failslab, interval 1, probability 0, space 0, times 0 [ 2346.669812][T12940] FAULT_INJECTION: forcing a failure. [ 2346.669812][T12940] name failslab, interval 1, probability 0, space 0, times 0 [ 2346.675068][T12938] CPU: 0 PID: 12938 Comm: syz-executor.0 Not tainted 6.2.0-syzkaller-12765-g982818426a0f #0 [ 2346.692718][T12938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2346.702816][T12938] Call Trace: [ 2346.706144][T12938] [ 2346.709176][T12938] dump_stack_lvl+0x136/0x150 [ 2346.713912][T12938] should_fail_ex+0x4a3/0x5b0 15:29:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) (rerun: 64) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0xe2f}, 0x14}}, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x34, 0x0, 0x0) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000002c0)=0xc) (async) r7 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r8 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x140, r3, 0x200, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x140}, 0x1, 0x0, 0x0, 0x80}, 0xc010) r9 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c5e58cc5220c86cccbd70000d0500000a00020032000000efff03000000000008080500657df066b9e954165f6d33aab2a9360da2676b1c1e307c", @ANYRES32=0x0, @ANYBLOB="0c00088008000400350000000400040024000c8008000300ff07000006000100020000000800020007000000080002003f000000"], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x48080) [ 2346.718662][T12938] should_failslab+0x9/0x20 [ 2346.723245][T12938] __kmem_cache_alloc_node+0x5b/0x330 [ 2346.728686][T12938] ? tomoyo_realpath_from_path+0xc3/0x600 [ 2346.734464][T12938] ? tomoyo_realpath_from_path+0xc3/0x600 [ 2346.740234][T12938] __kmalloc+0x4a/0xd0 [ 2346.744362][T12938] tomoyo_realpath_from_path+0xc3/0x600 [ 2346.749983][T12938] ? tomoyo_profile+0x46/0x60 [ 2346.754714][T12938] tomoyo_path_number_perm+0x217/0x570 [ 2346.760229][T12938] ? tomoyo_path_number_perm+0x1c1/0x570 [ 2346.766088][T12938] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2346.772004][T12938] ? wait_for_completion_io_timeout+0x20/0x20 [ 2346.778159][T12938] ? __fget_files+0x26a/0x480 [ 2346.782879][T12938] security_file_ioctl+0x54/0xb0 [ 2346.787901][T12938] __x64_sys_ioctl+0xb7/0x210 [ 2346.792636][T12938] do_syscall_64+0x39/0xb0 [ 2346.797107][T12938] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2346.803059][T12938] RIP: 0033:0x7f9e3088c0f9 [ 2346.807507][T12938] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2346.827158][T12938] RSP: 002b:00007f9e3163b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2346.835615][T12938] RAX: ffffffffffffffda RBX: 00007f9e309abf80 RCX: 00007f9e3088c0f9 [ 2346.843667][T12938] RDX: 0000000020000080 RSI: 0000000000002285 RDI: 0000000000000003 [ 2346.851671][T12938] RBP: 00007f9e3163b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2346.859681][T12938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2346.867720][T12938] R13: 00007f9e30acfb1f R14: 00007f9e3163b300 R15: 0000000000022000 [ 2346.875750][T12938] [ 2346.882834][T12940] CPU: 1 PID: 12940 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-12765-g982818426a0f #0 [ 2346.892984][T12940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2346.903060][T12940] Call Trace: [ 2346.906357][T12940] [ 2346.909311][T12940] dump_stack_lvl+0x136/0x150 [ 2346.914042][T12940] should_fail_ex+0x4a3/0x5b0 [ 2346.918757][T12940] should_failslab+0x9/0x20 [ 2346.923284][T12940] __kmem_cache_alloc_node+0x5b/0x330 [ 2346.928685][T12940] ? tomoyo_realpath_from_path+0xc3/0x600 [ 2346.934467][T12940] ? tomoyo_realpath_from_path+0xc3/0x600 [ 2346.940235][T12940] __kmalloc+0x4a/0xd0 [ 2346.944423][T12940] tomoyo_realpath_from_path+0xc3/0x600 [ 2346.950015][T12940] ? tomoyo_profile+0x46/0x60 [ 2346.954715][T12940] tomoyo_path_number_perm+0x217/0x570 [ 2346.960182][T12940] ? tomoyo_path_number_perm+0x1c1/0x570 [ 2346.965833][T12940] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2346.971771][T12940] ? wait_for_completion_io_timeout+0x20/0x20 [ 2346.977877][T12940] ? __fget_files+0x26a/0x480 [ 2346.982600][T12940] security_file_ioctl+0x54/0xb0 [ 2346.987568][T12940] __x64_sys_ioctl+0xb7/0x210 [ 2346.992276][T12940] do_syscall_64+0x39/0xb0 [ 2346.996716][T12940] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2347.002640][T12940] RIP: 0033:0x7fe8ba68c0f9 [ 2347.007080][T12940] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2347.026713][T12940] RSP: 002b:00007fe8bb499168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2347.035173][T12940] RAX: ffffffffffffffda RBX: 00007fe8ba7abf80 RCX: 00007fe8ba68c0f9 [ 2347.043159][T12940] RDX: 00000000200002c0 RSI: 0000000000002275 RDI: 0000000000000003 [ 2347.051144][T12940] RBP: 00007fe8bb4991d0 R08: 0000000000000000 R09: 0000000000000000 [ 2347.059125][T12940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2347.067104][T12940] R13: 00007fe8ba8cfb1f R14: 00007fe8bb499300 R15: 0000000000022000 [ 2347.075105][T12940] [ 2347.089981][T12931] CPU: 0 PID: 12931 Comm: syz-executor.2 Not tainted 6.2.0-syzkaller-12765-g982818426a0f #0 [ 2347.100132][T12931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2347.110238][T12931] Call Trace: [ 2347.113550][T12931] [ 2347.116576][T12931] dump_stack_lvl+0x136/0x150 [ 2347.121315][T12931] should_fail_ex+0x4a3/0x5b0 [ 2347.126066][T12931] ? fasync_helper+0x3f/0xb0 [ 2347.130741][T12931] should_failslab+0x9/0x20 [ 2347.135298][T12931] kmem_cache_alloc+0x5a/0x320 [ 2347.140122][T12931] fasync_helper+0x3f/0xb0 [ 2347.144690][T12931] sg_fasync+0xea/0x190 [ 2347.148903][T12931] ? dev_seq_stop+0x40/0x40 [ 2347.153466][T12931] do_vfs_ioctl+0x2b0/0x1670 [ 2347.156999][T12940] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2347.158091][T12931] ? vfs_fileattr_set+0xc40/0xc40 [ 2347.158147][T12931] ? wait_for_completion_io_timeout+0x20/0x20 [ 2347.176014][T12931] ? __fget_files+0x26a/0x480 [ 2347.180763][T12931] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2347.186048][T12931] __x64_sys_ioctl+0x10c/0x210 [ 2347.190893][T12931] do_syscall_64+0x39/0xb0 [ 2347.195373][T12931] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2347.201351][T12931] RIP: 0033:0x7f0b0048c0f9 [ 2347.205818][T12931] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2347.225477][T12931] RSP: 002b:00007f0b0126d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2347.233949][T12931] RAX: ffffffffffffffda RBX: 00007f0b005abf80 RCX: 00007f0b0048c0f9 [ 2347.242012][T12931] RDX: 00000000200002c0 RSI: 0000000000005452 RDI: 0000000000000003 [ 2347.250025][T12931] RBP: 00007f0b0126d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2347.252919][T12938] ERROR: Out of memory at tomoyo_realpath_from_path. 15:29:55 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 4) 15:29:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 2) 15:29:55 executing program 1: syz_open_dev$I2C(&(0x7f0000000280), 0x4, 0x200200) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x52}, 0x24000095) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x12200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x404d884) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x0, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) [ 2347.258009][T12931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2347.258030][T12931] R13: 00007f0b006cfb1f R14: 00007f0b0126d300 R15: 0000000000022000 [ 2347.258068][T12931] 15:29:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x0, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2347.358158][T12953] FAULT_INJECTION: forcing a failure. [ 2347.358158][T12953] name failslab, interval 1, probability 0, space 0, times 0 [ 2347.381060][T12953] CPU: 1 PID: 12953 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-12765-g982818426a0f #0 [ 2347.391221][T12953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2347.401334][T12953] Call Trace: [ 2347.404650][T12953] [ 2347.407616][T12953] dump_stack_lvl+0x136/0x150 [ 2347.412372][T12953] should_fail_ex+0x4a3/0x5b0 [ 2347.417136][T12953] should_failslab+0x9/0x20 [ 2347.421889][T12953] __kmem_cache_alloc_node+0x5b/0x330 [ 2347.427346][T12953] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 2347.432799][T12953] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 2347.438434][T12953] __kmalloc+0x4a/0xd0 [ 2347.442539][T12953] tomoyo_encode2.part.0+0xe9/0x3a0 [ 2347.447763][T12953] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2347.453391][T12953] tomoyo_encode+0x2c/0x50 [ 2347.457839][T12953] tomoyo_realpath_from_path+0x185/0x600 [ 2347.463504][T12953] tomoyo_path_number_perm+0x217/0x570 [ 2347.468985][T12953] ? tomoyo_path_number_perm+0x1c1/0x570 [ 2347.474643][T12953] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2347.480529][T12953] ? wait_for_completion_io_timeout+0x20/0x20 [ 2347.486643][T12953] ? __fget_files+0x26a/0x480 [ 2347.491379][T12953] security_file_ioctl+0x54/0xb0 [ 2347.496344][T12953] __x64_sys_ioctl+0xb7/0x210 [ 2347.501058][T12953] do_syscall_64+0x39/0xb0 [ 2347.505495][T12953] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2347.511435][T12953] RIP: 0033:0x7fe8ba68c0f9 [ 2347.515881][T12953] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2347.535512][T12953] RSP: 002b:00007fe8bb499168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2347.543996][T12953] RAX: ffffffffffffffda RBX: 00007fe8ba7abf80 RCX: 00007fe8ba68c0f9 15:29:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) [ 2347.552021][T12953] RDX: 00000000200002c0 RSI: 0000000000002275 RDI: 0000000000000003 [ 2347.560034][T12953] RBP: 00007fe8bb4991d0 R08: 0000000000000000 R09: 0000000000000000 [ 2347.568020][T12953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2347.576003][T12953] R13: 00007fe8ba8cfb1f R14: 00007fe8bb499300 R15: 0000000000022000 [ 2347.584009][T12953] 15:29:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 2) 15:29:56 executing program 1: syz_open_dev$I2C(&(0x7f0000000280), 0x4, 0x200200) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x52}, 0x24000095) (async) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x12200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x404d884) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2347.616473][T12953] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2347.654721][T12959] FAULT_INJECTION: forcing a failure. 15:29:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 3) 15:29:56 executing program 1: syz_open_dev$I2C(&(0x7f0000000280), 0x4, 0x200200) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x52}, 0x24000095) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x12200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x404d884) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) syz_open_dev$I2C(&(0x7f0000000280), 0x4, 0x200200) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x52}, 0x24000095) (async) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x12200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x404d884) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) 15:29:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) [ 2347.654721][T12959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2347.723447][T12971] FAULT_INJECTION: forcing a failure. [ 2347.723447][T12971] name failslab, interval 1, probability 0, space 0, times 0 [ 2347.783833][T12971] CPU: 1 PID: 12971 Comm: syz-executor.0 Not tainted 6.2.0-syzkaller-12765-g982818426a0f #0 [ 2347.793998][T12971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2347.804095][T12971] Call Trace: [ 2347.807413][T12971] [ 2347.810387][T12971] dump_stack_lvl+0x136/0x150 [ 2347.815123][T12971] should_fail_ex+0x4a3/0x5b0 [ 2347.819862][T12971] should_failslab+0x9/0x20 [ 2347.824404][T12971] __kmem_cache_alloc_node+0x5b/0x330 [ 2347.829937][T12971] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 2347.835388][T12971] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 2347.840837][T12971] __kmalloc+0x4a/0xd0 [ 2347.844960][T12971] tomoyo_encode2.part.0+0xe9/0x3a0 [ 2347.850465][T12971] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2347.856048][T12971] tomoyo_encode+0x2c/0x50 [ 2347.860488][T12971] tomoyo_realpath_from_path+0x185/0x600 [ 2347.866236][T12971] tomoyo_path_number_perm+0x217/0x570 [ 2347.871716][T12971] ? tomoyo_path_number_perm+0x1c1/0x570 [ 2347.877383][T12971] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2347.883235][T12971] ? wait_for_completion_io_timeout+0x20/0x20 [ 2347.889346][T12971] ? __fget_files+0x26a/0x480 [ 2347.894051][T12971] security_file_ioctl+0x54/0xb0 [ 2347.899018][T12971] __x64_sys_ioctl+0xb7/0x210 [ 2347.903729][T12971] do_syscall_64+0x39/0xb0 [ 2347.908165][T12971] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2347.914091][T12971] RIP: 0033:0x7f9e3088c0f9 [ 2347.918526][T12971] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2347.938167][T12971] RSP: 002b:00007f9e3163b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2347.946615][T12971] RAX: ffffffffffffffda RBX: 00007f9e309abf80 RCX: 00007f9e3088c0f9 [ 2347.954625][T12971] RDX: 0000000020000080 RSI: 0000000000002285 RDI: 0000000000000003 [ 2347.962623][T12971] RBP: 00007f9e3163b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2347.970634][T12971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2347.978643][T12971] R13: 00007f9e30acfb1f R14: 00007f9e3163b300 R15: 0000000000022000 [ 2347.986821][T12971] [ 2347.995077][T12959] CPU: 1 PID: 12959 Comm: syz-executor.2 Not tainted 6.2.0-syzkaller-12765-g982818426a0f #0 [ 2348.005315][T12959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2348.015417][T12959] Call Trace: [ 2348.018727][T12959] [ 2348.021687][T12959] dump_stack_lvl+0x136/0x150 [ 2348.026418][T12959] should_fail_ex+0x4a3/0x5b0 [ 2348.031153][T12959] _copy_to_user+0x2e/0x150 [ 2348.035719][T12959] simple_read_from_buffer+0xd0/0x160 [ 2348.041151][T12959] proc_fail_nth_read+0x18b/0x220 [ 2348.046238][T12959] ? proc_exe_link+0x1e0/0x1e0 [ 2348.051062][T12959] ? security_file_permission+0xaf/0xd0 [ 2348.056679][T12959] vfs_read+0x25b/0x930 [ 2348.060905][T12959] ? proc_exe_link+0x1e0/0x1e0 [ 2348.065722][T12959] ? kernel_read+0x1c0/0x1c0 [ 2348.070367][T12959] ? __fget_files+0x26a/0x480 [ 2348.075221][T12959] ksys_read+0x12b/0x250 [ 2348.079561][T12959] ? vfs_write+0xe10/0xe10 [ 2348.084030][T12959] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2348.089986][T12959] do_syscall_64+0x39/0xb0 [ 2348.094458][T12959] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2348.100497][T12959] RIP: 0033:0x7f0b0043df1c [ 2348.104962][T12959] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2348.124613][T12959] RSP: 002b:00007f0b0126d160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2348.133078][T12959] RAX: ffffffffffffffda RBX: 00007f0b005abf80 RCX: 00007f0b0043df1c [ 2348.141171][T12959] RDX: 000000000000000f RSI: 00007f0b0126d1e0 RDI: 0000000000000004 [ 2348.149194][T12959] RBP: 00007f0b0126d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2348.157218][T12959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2348.165229][T12959] R13: 00007f0b006cfb1f R14: 00007f0b0126d300 R15: 0000000000022000 [ 2348.173355][T12959] 15:29:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:29:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 4) 15:29:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, 0x0}, 0x0) 15:29:56 executing program 1: socket$nl_route(0x10, 0x3, 0x0) 15:29:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 3) [ 2348.192103][T12971] ERROR: Out of memory at tomoyo_realpath_from_path. 15:29:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, 0x0}, 0x0) 15:29:56 executing program 1: socket$nl_route(0x10, 0x3, 0x0) 15:29:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 5) 15:29:56 executing program 3: socket$nl_route(0x10, 0x3, 0x0) 15:29:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, 0x0}, 0x0) 15:29:56 executing program 1: socket$nl_route(0x10, 0x3, 0x0) 15:29:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x10, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 1) [ 2348.352306][T12995] FAULT_INJECTION: forcing a failure. [ 2348.352306][T12995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2348.373400][T13001] FAULT_INJECTION: forcing a failure. [ 2348.373400][T13001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2348.426064][T12995] CPU: 1 PID: 12995 Comm: syz-executor.0 Not tainted 6.2.0-syzkaller-12765-g982818426a0f #0 [ 2348.426578][T13006] FAULT_INJECTION: forcing a failure. [ 2348.426578][T13006] name failslab, interval 1, probability 0, space 0, times 0 [ 2348.436232][T12995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2348.436257][T12995] Call Trace: [ 2348.436267][T12995] [ 2348.436280][T12995] dump_stack_lvl+0x136/0x150 [ 2348.436323][T12995] should_fail_ex+0x4a3/0x5b0 [ 2348.436363][T12995] _copy_from_user+0x2e/0x180 [ 2348.436393][T12995] get_sg_io_hdr+0x143/0x8d0 [ 2348.436427][T12995] ? sg_add_request+0x2a7/0x380 [ 2348.436467][T12995] ? scsi_cmd_allowed+0x80/0x80 [ 2348.436495][T12995] ? _raw_write_unlock_irqrestore+0x54/0x70 [ 2348.436525][T12995] ? lockdep_hardirqs_on+0x7d/0x100 [ 2348.436559][T12995] ? _raw_write_unlock_irqrestore+0x41/0x70 [ 2348.436584][T12995] ? sg_add_request+0x2ac/0x380 [ 2348.515789][T12995] sg_new_write.isra.0+0x141/0xa90 [ 2348.520972][T12995] ? sg_common_write.constprop.0+0x1e00/0x1e00 [ 2348.527197][T12995] ? __kmem_cache_free+0xaf/0x2d0 [ 2348.532320][T12995] ? scsi_block_when_processing_errors+0x298/0x350 [ 2348.538880][T12995] ? scsi_check_sense+0x1130/0x1130 [ 2348.544139][T12995] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2348.550092][T12995] ? do_vfs_ioctl+0x132/0x1670 [ 2348.554921][T12995] sg_ioctl+0x9a8/0x2700 [ 2348.559226][T12995] ? sg_write+0xe0/0xe0 [ 2348.563444][T12995] ? __fget_files+0x26a/0x480 [ 2348.568175][T12995] ? bpf_lsm_file_ioctl+0x9/0x10 15:29:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x25dfdbfb, {0x2, 0x40}}, 0x18}}, 0x0) 15:29:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x541b, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2348.573162][T12995] ? sg_write+0xe0/0xe0 [ 2348.577382][T12995] __x64_sys_ioctl+0x197/0x210 [ 2348.582210][T12995] do_syscall_64+0x39/0xb0 [ 2348.586678][T12995] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2348.592630][T12995] RIP: 0033:0x7f9e3088c0f9 [ 2348.597093][T12995] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2348.616748][T12995] RSP: 002b:00007f9e3163b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2348.625372][T12995] RAX: ffffffffffffffda RBX: 00007f9e309abf80 RCX: 00007f9e3088c0f9 [ 2348.633383][T12995] RDX: 0000000020000080 RSI: 0000000000002285 RDI: 0000000000000003 [ 2348.641390][T12995] RBP: 00007f9e3163b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2348.649398][T12995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2348.657412][T12995] R13: 00007f9e30acfb1f R14: 00007f9e3163b300 R15: 0000000000022000 [ 2348.665439][T12995] [ 2348.669187][T13006] CPU: 0 PID: 13006 Comm: syz-executor.3 Not tainted 6.2.0-syzkaller-12765-g982818426a0f #0 [ 2348.679328][T13006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2348.689422][T13006] Call Trace: [ 2348.692728][T13006] [ 2348.695678][T13006] dump_stack_lvl+0x136/0x150 [ 2348.700392][T13006] should_fail_ex+0x4a3/0x5b0 [ 2348.705127][T13006] should_failslab+0x9/0x20 [ 2348.709657][T13006] __kmem_cache_alloc_node+0x5b/0x330 [ 2348.715055][T13006] ? tomoyo_realpath_from_path+0xc3/0x600 [ 2348.720803][T13006] ? tomoyo_realpath_from_path+0xc3/0x600 [ 2348.726547][T13006] __kmalloc+0x4a/0xd0 [ 2348.730643][T13006] tomoyo_realpath_from_path+0xc3/0x600 [ 2348.736215][T13006] ? tomoyo_profile+0x46/0x60 [ 2348.740929][T13006] tomoyo_path_number_perm+0x217/0x570 [ 2348.746405][T13006] ? tomoyo_path_number_perm+0x1c1/0x570 [ 2348.752059][T13006] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2348.757914][T13006] ? wait_for_completion_io_timeout+0x20/0x20 [ 2348.764020][T13006] ? __fget_files+0x26a/0x480 [ 2348.768718][T13006] security_file_ioctl+0x54/0xb0 [ 2348.773688][T13006] __x64_sys_ioctl+0xb7/0x210 [ 2348.778396][T13006] do_syscall_64+0x39/0xb0 [ 2348.782843][T13006] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2348.788769][T13006] RIP: 0033:0x7f008128c0f9 [ 2348.793202][T13006] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2348.812857][T13006] RSP: 002b:00007f0081f54168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2348.821314][T13006] RAX: ffffffffffffffda RBX: 00007f00813abf80 RCX: 00007f008128c0f9 [ 2348.829306][T13006] RDX: 00000000200002c0 RSI: 0000000000005385 RDI: 0000000000000003 [ 2348.837315][T13006] RBP: 00007f0081f541d0 R08: 0000000000000000 R09: 0000000000000000 [ 2348.845305][T13006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2348.853286][T13006] R13: 00007f00814cfb1f R14: 00007f0081f54300 R15: 0000000000022000 [ 2348.861286][T13006] 15:29:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 4) 15:29:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x25dfdbfb, {0x2, 0x40}}, 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x25dfdbfb, {0x2, 0x40}}, 0x18}}, 0x0) (async) 15:29:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5421, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2348.868432][T13001] CPU: 1 PID: 13001 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-12765-g982818426a0f #0 [ 2348.878582][T13001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2348.888683][T13001] Call Trace: [ 2348.892011][T13001] [ 2348.894969][T13001] dump_stack_lvl+0x136/0x150 [ 2348.899704][T13001] should_fail_ex+0x4a3/0x5b0 [ 2348.904480][T13001] _copy_to_user+0x2e/0x150 [ 2348.909044][T13001] simple_read_from_buffer+0xd0/0x160 [ 2348.914483][T13001] proc_fail_nth_read+0x18b/0x220 [ 2348.919580][T13001] ? proc_exe_link+0x1e0/0x1e0 [ 2348.924405][T13001] ? security_file_permission+0xaf/0xd0 [ 2348.930016][T13001] vfs_read+0x25b/0x930 [ 2348.934226][T13001] ? proc_exe_link+0x1e0/0x1e0 [ 2348.939039][T13001] ? kernel_read+0x1c0/0x1c0 [ 2348.943685][T13001] ? __fget_files+0x26a/0x480 [ 2348.948430][T13001] ksys_read+0x12b/0x250 [ 2348.952734][T13001] ? vfs_write+0xe10/0xe10 [ 2348.957247][T13001] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2348.963205][T13001] do_syscall_64+0x39/0xb0 [ 2348.967678][T13001] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2348.973641][T13001] RIP: 0033:0x7fe8ba63df1c [ 2348.978096][T13001] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2348.996875][T13021] FAULT_INJECTION: forcing a failure. [ 2348.996875][T13021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2348.997736][T13001] RSP: 002b:00007fe8bb499160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2348.997765][T13001] RAX: ffffffffffffffda RBX: 00007fe8ba7abf80 RCX: 00007fe8ba63df1c [ 2348.997783][T13001] RDX: 000000000000000f RSI: 00007fe8bb4991e0 RDI: 0000000000000004 [ 2348.997799][T13001] RBP: 00007fe8bb4991d0 R08: 0000000000000000 R09: 0000000000000000 [ 2348.997815][T13001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2348.997829][T13001] R13: 00007fe8ba8cfb1f R14: 00007fe8bb499300 R15: 0000000000022000 [ 2349.059284][T13001] [ 2349.062328][T13021] CPU: 0 PID: 13021 Comm: syz-executor.0 Not tainted 6.2.0-syzkaller-12765-g982818426a0f #0 [ 2349.072460][T13021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2349.082639][T13021] Call Trace: [ 2349.085970][T13021] [ 2349.088929][T13021] dump_stack_lvl+0x136/0x150 [ 2349.093671][T13021] should_fail_ex+0x4a3/0x5b0 [ 2349.098408][T13021] _copy_from_user+0x2e/0x180 [ 2349.103156][T13021] sg_new_write.isra.0+0x3ca/0xa90 [ 2349.108338][T13021] ? sg_common_write.constprop.0+0x1e00/0x1e00 [ 2349.114528][T13021] ? __kmem_cache_free+0xaf/0x2d0 [ 2349.119620][T13021] ? scsi_block_when_processing_errors+0x298/0x350 [ 2349.126163][T13021] ? scsi_check_sense+0x1130/0x1130 [ 2349.131381][T13021] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2349.137308][T13021] ? do_vfs_ioctl+0x132/0x1670 [ 2349.142109][T13021] sg_ioctl+0x9a8/0x2700 [ 2349.146386][T13021] ? sg_write+0xe0/0xe0 [ 2349.150572][T13021] ? __fget_files+0x26a/0x480 [ 2349.155269][T13021] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2349.160221][T13021] ? sg_write+0xe0/0xe0 [ 2349.164394][T13021] __x64_sys_ioctl+0x197/0x210 [ 2349.169207][T13021] do_syscall_64+0x39/0xb0 [ 2349.173640][T13021] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2349.179559][T13021] RIP: 0033:0x7f9e3088c0f9 [ 2349.183990][T13021] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2349.203808][T13021] RSP: 002b:00007f9e3163b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2349.212256][T13021] RAX: ffffffffffffffda RBX: 00007f9e309abf80 RCX: 00007f9e3088c0f9 [ 2349.220243][T13021] RDX: 0000000020000080 RSI: 0000000000002285 RDI: 0000000000000003 [ 2349.228235][T13021] RBP: 00007f9e3163b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2349.236220][T13021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2349.244207][T13021] R13: 00007f9e30acfb1f R14: 00007f9e3163b300 R15: 0000000000022000 [ 2349.252206][T13021] 15:29:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={0x0}}, 0x0) 15:29:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5450, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) (async) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x25dfdbfb, {0x2, 0x40}}, 0x18}}, 0x0) [ 2349.284586][T13006] ERROR: Out of memory at tomoyo_realpath_from_path. 15:29:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5451, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={0x0}}, 0x0) 15:29:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) renameat(r1, &(0x7f0000000440)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000480)='./file0\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x3, 0x7fff, 0x4e45, 0x4, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0x7}, 0x48) getgroups(0x4, &(0x7f0000000180)=[0xee00, 0x0, 0x0, 0xee01]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="2e2f66ea51969f0081ee7616ca4adb0f7adec1ec3951c8de19b27cee224fd966e3332dcdbc7b36e7fb28c9ed2ac7ef487af9f4b91df3869d5bd328843b350d4a3ecb7b64eb732a96b9616bc9cb98307920e37264d0eacc51d2240823bbcc3da6143f9b67677d2b6805859cc2054b622d657fd168570aff1f91dbb6047fe9cf97c291526a896076d95616a7f0564058f608828a160a48ece9b40b33a30fb48765d949cd4bfc2e00d680c770174eb1a6265e126757950fc699102c10708525b1c96041080cb32be80a27116fb69b34f3297d9c7433a722fa704c9d212f6d6fb8b772fa14cffdc1a9e54f4884874edc1d5b148b9f6af3362642f9a943142801838780aa322d557f8091f0118e"]) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4800) 15:29:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 5) 15:29:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x545d, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={0x0}}, 0x0) 15:29:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5460, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) renameat(r1, &(0x7f0000000440)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000480)='./file0\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x3, 0x7fff, 0x4e45, 0x4, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0x7}, 0x48) getgroups(0x4, &(0x7f0000000180)=[0xee00, 0x0, 0x0, 0xee01]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="2e2f66ea51969f0081ee7616ca4adb0f7adec1ec3951c8de19b27cee224fd966e3332dcdbc7b36e7fb28c9ed2ac7ef487af9f4b91df3869d5bd328843b350d4a3ecb7b64eb732a96b9616bc9cb98307920e37264d0eacc51d2240823bbcc3da6143f9b67677d2b6805859cc2054b622d657fd168570aff1f91dbb6047fe9cf97c291526a896076d95616a7f0564058f608828a160a48ece9b40b33a30fb48765d949cd4bfc2e00d680c770174eb1a6265e126757950fc699102c10708525b1c96041080cb32be80a27116fb69b34f3297d9c7433a722fa704c9d212f6d6fb8b772fa14cffdc1a9e54f4884874edc1d5b148b9f6af3362642f9a943142801838780aa322d557f8091f0118e"]) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4800) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) pipe2$watch_queue(&(0x7f00000001c0), 0x80) (async) renameat(r1, &(0x7f0000000440)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000480)='./file0\x00') (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x3, 0x7fff, 0x4e45, 0x4, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0x7}, 0x48) (async) getgroups(0x4, &(0x7f0000000180)=[0xee00, 0x0, 0x0, 0xee01]) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="2e2f66ea51969f0081ee7616ca4adb0f7adec1ec3951c8de19b27cee224fd966e3332dcdbc7b36e7fb28c9ed2ac7ef487af9f4b91df3869d5bd328843b350d4a3ecb7b64eb732a96b9616bc9cb98307920e37264d0eacc51d2240823bbcc3da6143f9b67677d2b6805859cc2054b622d657fd168570aff1f91dbb6047fe9cf97c291526a896076d95616a7f0564058f608828a160a48ece9b40b33a30fb48765d949cd4bfc2e00d680c770174eb1a6265e126757950fc699102c10708525b1c96041080cb32be80a27116fb69b34f3297d9c7433a722fa704c9d212f6d6fb8b772fa14cffdc1a9e54f4884874edc1d5b148b9f6af3362642f9a943142801838780aa322d557f8091f0118e"]) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async) sendmsg$FOU_CMD_DEL(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4800) (async) 15:29:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) 15:29:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x1267, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) renameat(r1, &(0x7f0000000440)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000480)='./file0\x00') (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x3, 0x7fff, 0x4e45, 0x4, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0x7}, 0x48) (async, rerun: 32) getgroups(0x4, &(0x7f0000000180)=[0xee00, 0x0, 0x0, 0xee01]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="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"]) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async) sendmsg$FOU_CMD_DEL(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4800) 15:29:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x8933, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x1274, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) (fail_nth: 1) 15:29:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000280), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x44, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xffffffc5}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x80000000, 0x1ff, 0x7}}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_LOCAL={0x8, 0x2, @remote}]}, 0x44}}, 0x0) 15:29:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x400448c9, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x1275, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x400448dd, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000280), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x44, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xffffffc5}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x80000000, 0x1ff, 0x7}}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_LOCAL={0x8, 0x2, @remote}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000280), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x44, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xffffffc5}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x80000000, 0x1ff, 0x7}}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_LOCAL={0x8, 0x2, @remote}]}, 0x44}}, 0x0) (async) [ 2349.899819][T13079] FAULT_INJECTION: forcing a failure. [ 2349.899819][T13079] name fail_usercopy, interval 1, probability 0, space 0, times 0 15:29:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x1276, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x400454ca, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2349.977355][T13079] CPU: 1 PID: 13079 Comm: syz-executor.5 Not tainted 6.2.0-syzkaller-12765-g982818426a0f #0 [ 2349.987580][T13079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2349.997695][T13079] Call Trace: [ 2350.001014][T13079] [ 2350.003982][T13079] dump_stack_lvl+0x136/0x150 [ 2350.008729][T13079] should_fail_ex+0x4a3/0x5b0 [ 2350.013477][T13079] _copy_from_user+0x2e/0x180 [ 2350.018229][T13079] copy_msghdr_from_user+0x89/0x150 [ 2350.023502][T13079] ? __copy_msghdr+0x4b0/0x4b0 [ 2350.028336][T13079] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2350.034379][T13079] ? find_held_lock+0x2d/0x110 [ 2350.039179][T13079] ___sys_sendmsg+0xdd/0x1b0 [ 2350.043788][T13079] ? do_recvmmsg+0x6e0/0x6e0 [ 2350.048395][T13079] ? __fget_files+0x248/0x480 [ 2350.053087][T13079] ? lock_downgrade+0x690/0x690 [ 2350.057961][T13079] ? find_held_lock+0x2d/0x110 [ 2350.062783][T13079] ? ksys_write+0x210/0x250 [ 2350.067305][T13079] ? __fget_files+0x26a/0x480 [ 2350.072004][T13079] ? __fget_light+0xe5/0x270 [ 2350.076634][T13079] __sys_sendmsg+0xf7/0x1c0 [ 2350.081177][T13079] ? __sys_sendmsg_sock+0x40/0x40 [ 2350.086243][T13079] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2350.092167][T13079] ? lockdep_hardirqs_on+0x7d/0x100 [ 2350.097422][T13079] do_syscall_64+0x39/0xb0 [ 2350.101861][T13079] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2350.107812][T13079] RIP: 0033:0x7fd93888c0f9 [ 2350.112243][T13079] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2350.131894][T13079] RSP: 002b:00007fd9396b5168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2350.140339][T13079] RAX: ffffffffffffffda RBX: 00007fd9389abf80 RCX: 00007fd93888c0f9 [ 2350.148350][T13079] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2350.156454][T13079] RBP: 00007fd9396b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2350.164444][T13079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 15:29:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x6, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2350.172425][T13079] R13: 00007fd938acfb1f R14: 00007fd9396b5300 R15: 0000000000022000 [ 2350.180425][T13079] 15:29:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x40049409, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) (fail_nth: 2) 15:29:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x10, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000280), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) (rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x44, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xffffffc5}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x80000000, 0x1ff, 0x7}}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_LOCAL={0x8, 0x2, @remote}]}, 0x44}}, 0x0) 15:29:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2202, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x10, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x40086602, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x1267, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x1267, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x40186366, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800000014000100000000000000000002000000eb6f7c05ea08f00fa3ec8ebe82580f787d79db608b5d5b1fe0dc43086b51453baf06a83e9717ffa062924c43553708362a6d87005031c5330e1eb623382349b48f84aa9ee56e52394cc8fdc5a219028bcaba27665760b4e43f9c896ecdcf9866cd1c0ba6f30679db1f864c22708fcd4ce36449e3bca1ce6b714934b573aff1841673021e427cf4012139eb38a5d00bd07c4ec0389e42c74cceaf1e256f", @ANYRES32=0x0], 0x18}}, 0x0) 15:29:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2205, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2350.668981][T13121] FAULT_INJECTION: forcing a failure. [ 2350.668981][T13121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2350.782902][T13121] CPU: 0 PID: 13121 Comm: syz-executor.5 Not tainted 6.2.0-syzkaller-12765-g982818426a0f #0 [ 2350.793067][T13121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2350.803162][T13121] Call Trace: [ 2350.806470][T13121] [ 2350.809441][T13121] dump_stack_lvl+0x136/0x150 [ 2350.814189][T13121] should_fail_ex+0x4a3/0x5b0 [ 2350.818926][T13121] _copy_from_user+0x2e/0x180 [ 2350.823659][T13121] move_addr_to_kernel.part.0+0x31/0x110 [ 2350.829353][T13121] __copy_msghdr+0x3c6/0x4b0 [ 2350.833991][T13121] copy_msghdr_from_user+0xb4/0x150 [ 2350.839235][T13121] ? __copy_msghdr+0x4b0/0x4b0 [ 2350.844047][T13121] ? find_held_lock+0x2d/0x110 [ 2350.848865][T13121] ___sys_sendmsg+0xdd/0x1b0 [ 2350.853519][T13121] ? do_recvmmsg+0x6e0/0x6e0 [ 2350.858160][T13121] ? __fget_files+0x248/0x480 [ 2350.862875][T13121] ? lock_downgrade+0x690/0x690 [ 2350.867770][T13121] ? find_held_lock+0x2d/0x110 [ 2350.872595][T13121] ? ksys_write+0x210/0x250 [ 2350.877151][T13121] ? __fget_files+0x26a/0x480 [ 2350.881878][T13121] ? __fget_light+0xe5/0x270 [ 2350.886518][T13121] __sys_sendmsg+0xf7/0x1c0 [ 2350.891093][T13121] ? __sys_sendmsg_sock+0x40/0x40 [ 2350.896190][T13121] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2350.902140][T13121] ? lockdep_hardirqs_on+0x7d/0x100 [ 2350.907475][T13121] do_syscall_64+0x39/0xb0 [ 2350.911934][T13121] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2350.917879][T13121] RIP: 0033:0x7fd93888c0f9 [ 2350.922322][T13121] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2350.941971][T13121] RSP: 002b:00007fd9396b5168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2350.950438][T13121] RAX: ffffffffffffffda RBX: 00007fd9389abf80 RCX: 00007fd93888c0f9 [ 2350.958441][T13121] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2350.966439][T13121] RBP: 00007fd9396b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2350.974442][T13121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2350.982440][T13121] R13: 00007fd938acfb1f R14: 00007fd9396b5300 R15: 0000000000022000 [ 2350.990459][T13121] 15:29:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) (fail_nth: 3) 15:29:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x1274, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x401c5820, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x1274, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800000014000100000000000000000002000000eb6f7c05ea08f00fa3ec8ebe82580f787d79db608b5d5b1fe0dc43086b51453baf06a83e9717ffa062924c43553708362a6d87005031c5330e1eb623382349b48f84aa9ee56e52394cc8fdc5a219028bcaba27665760b4e43f9c896ecdcf9866cd1c0ba6f30679db1f864c22708fcd4ce36449e3bca1ce6b714934b573aff1841673021e427cf4012139eb38a5d00bd07c4ec0389e42c74cceaf1e256f", @ANYRES32=0x0], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800000014000100000000000000000002000000eb6f7c05ea08f00fa3ec8ebe82580f787d79db608b5d5b1fe0dc43086b51453baf06a83e9717ffa062924c43553708362a6d87005031c5330e1eb623382349b48f84aa9ee56e52394cc8fdc5a219028bcaba27665760b4e43f9c896ecdcf9866cd1c0ba6f30679db1f864c22708fcd4ce36449e3bca1ce6b714934b573aff1841673021e427cf4012139eb38a5d00bd07c4ec0389e42c74cceaf1e256f", @ANYRES32=0x0], 0x18}}, 0x0) (async) 15:29:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2270, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2271, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x1275, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x1275, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x4020940d, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800000014000100000000000000000002000000eb6f7c05ea08f00fa3ec8ebe82580f787d79db608b5d5b1fe0dc43086b51453baf06a83e9717ffa062924c43553708362a6d87005031c5330e1eb623382349b48f84aa9ee56e52394cc8fdc5a219028bcaba27665760b4e43f9c896ecdcf9866cd1c0ba6f30679db1f864c22708fcd4ce36449e3bca1ce6b714934b573aff1841673021e427cf4012139eb38a5d00bd07c4ec0389e42c74cceaf1e256f", @ANYRES32=0x0], 0x18}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800000014000100000000000000000002000000eb6f7c05ea08f00fa3ec8ebe82580f787d79db608b5d5b1fe0dc43086b51453baf06a83e9717ffa062924c43553708362a6d87005031c5330e1eb623382349b48f84aa9ee56e52394cc8fdc5a219028bcaba27665760b4e43f9c896ecdcf9866cd1c0ba6f30679db1f864c22708fcd4ce36449e3bca1ce6b714934b573aff1841673021e427cf4012139eb38a5d00bd07c4ec0389e42c74cceaf1e256f", @ANYRES32=0x0], 0x18}}, 0x0) [ 2351.366683][T13144] FAULT_INJECTION: forcing a failure. [ 2351.366683][T13144] name fail_usercopy, interval 1, probability 0, space 0, times 0 15:30:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x80086301, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2351.468416][T13144] CPU: 0 PID: 13144 Comm: syz-executor.5 Not tainted 6.2.0-syzkaller-12765-g982818426a0f #0 [ 2351.478582][T13144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2351.488700][T13144] Call Trace: [ 2351.492016][T13144] [ 2351.494993][T13144] dump_stack_lvl+0x136/0x150 [ 2351.499748][T13144] should_fail_ex+0x4a3/0x5b0 [ 2351.504507][T13144] _copy_from_user+0x2e/0x180 [ 2351.509249][T13144] iovec_from_user+0x14d/0x3a0 [ 2351.514065][T13144] __import_iovec+0x69/0x610 [ 2351.518717][T13144] import_iovec+0x110/0x160 [ 2351.523340][T13144] copy_msghdr_from_user+0xed/0x150 [ 2351.528599][T13144] ? __copy_msghdr+0x4b0/0x4b0 [ 2351.533434][T13144] ? find_held_lock+0x2d/0x110 [ 2351.538260][T13144] ___sys_sendmsg+0xdd/0x1b0 [ 2351.542917][T13144] ? do_recvmmsg+0x6e0/0x6e0 [ 2351.547560][T13144] ? __fget_files+0x248/0x480 [ 2351.552808][T13144] ? lock_downgrade+0x690/0x690 [ 2351.557705][T13144] ? find_held_lock+0x2d/0x110 [ 2351.562517][T13144] ? ksys_write+0x210/0x250 [ 2351.567091][T13144] ? __fget_files+0x26a/0x480 [ 2351.571833][T13144] ? __fget_light+0xe5/0x270 [ 2351.576483][T13144] __sys_sendmsg+0xf7/0x1c0 [ 2351.581044][T13144] ? __sys_sendmsg_sock+0x40/0x40 [ 2351.586147][T13144] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2351.592107][T13144] ? lockdep_hardirqs_on+0x7d/0x100 [ 2351.597391][T13144] do_syscall_64+0x39/0xb0 [ 2351.601869][T13144] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2351.607807][T13144] RIP: 0033:0x7fd93888c0f9 [ 2351.612272][T13144] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2351.632020][T13144] RSP: 002b:00007fd9396b5168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2351.640492][T13144] RAX: ffffffffffffffda RBX: 00007fd9389abf80 RCX: 00007fd93888c0f9 [ 2351.648510][T13144] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2351.656518][T13144] RBP: 00007fd9396b51d0 R08: 0000000000000000 R09: 0000000000000000 15:30:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) (fail_nth: 4) 15:30:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x1276, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2272, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_deladdrlabel={0x88, 0x49, 0x200, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x1, 0x0, 0x0, 0x3ac}, [@IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_LABEL={0x8, 0x2, 0xa}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}}]}, 0x88}}, 0x0) 15:30:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x1276, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x80086601, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2351.664610][T13144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2351.672625][T13144] R13: 00007fd938acfb1f R14: 00007fd9396b5300 R15: 0000000000022000 [ 2351.680650][T13144] 15:30:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2276, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2201, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_deladdrlabel={0x88, 0x49, 0x200, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x1, 0x0, 0x0, 0x3ac}, [@IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_LABEL={0x8, 0x2, 0xa}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}}]}, 0x88}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_deladdrlabel={0x88, 0x49, 0x200, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x1, 0x0, 0x0, 0x3ac}, [@IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_LABEL={0x8, 0x2, 0xa}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}}]}, 0x88}}, 0x0) (async) 15:30:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2201, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x801c581f, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2279, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2351.839456][T13168] FAULT_INJECTION: forcing a failure. [ 2351.839456][T13168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2351.935913][T13168] CPU: 1 PID: 13168 Comm: syz-executor.5 Not tainted 6.2.0-syzkaller-12765-g982818426a0f #0 [ 2351.946120][T13168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2351.956229][T13168] Call Trace: [ 2351.959552][T13168] [ 2351.962526][T13168] dump_stack_lvl+0x136/0x150 [ 2351.967270][T13168] should_fail_ex+0x4a3/0x5b0 [ 2351.972122][T13168] _copy_to_user+0x2e/0x150 [ 2351.976692][T13168] simple_read_from_buffer+0xd0/0x160 [ 2351.982213][T13168] proc_fail_nth_read+0x18b/0x220 [ 2351.987299][T13168] ? proc_exe_link+0x1e0/0x1e0 [ 2351.992132][T13168] ? security_file_permission+0xaf/0xd0 [ 2351.997745][T13168] vfs_read+0x25b/0x930 [ 2352.001960][T13168] ? proc_exe_link+0x1e0/0x1e0 [ 2352.006780][T13168] ? kernel_read+0x1c0/0x1c0 [ 2352.011421][T13168] ? __fget_light+0xe5/0x270 [ 2352.016074][T13168] ? __fget_files+0x26a/0x480 [ 2352.020820][T13168] ksys_read+0x12b/0x250 [ 2352.025113][T13168] ? vfs_write+0xe10/0xe10 [ 2352.029580][T13168] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2352.035552][T13168] do_syscall_64+0x39/0xb0 [ 2352.040026][T13168] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2352.046017][T13168] RIP: 0033:0x7fd93883df1c [ 2352.050517][T13168] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2352.070209][T13168] RSP: 002b:00007fd9396b5160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2352.078681][T13168] RAX: ffffffffffffffda RBX: 00007fd9389abf80 RCX: 00007fd93883df1c [ 2352.086693][T13168] RDX: 000000000000000f RSI: 00007fd9396b51e0 RDI: 0000000000000004 [ 2352.094717][T13168] RBP: 00007fd9396b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2352.102735][T13168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2352.110746][T13168] R13: 00007fd938acfb1f R14: 00007fd9396b5300 R15: 0000000000022000 [ 2352.118778][T13168] 15:30:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) 15:30:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2202, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2202, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x227a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_deladdrlabel={0x88, 0x49, 0x200, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x1, 0x0, 0x0, 0x3ac}, [@IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_LABEL={0x8, 0x2, 0xa}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}}]}, 0x88}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_deladdrlabel={0x88, 0x49, 0x200, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x1, 0x0, 0x0, 0x3ac}, [@IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_LABEL={0x8, 0x2, 0xa}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}}]}, 0x88}}, 0x0) (async) 15:30:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0xc0045878, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2203, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2203, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0xc0045878, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x227b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:00 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x1276, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) 15:30:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2205, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0xc0189436, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2205, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x227c, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2270, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) 15:30:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2203, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0xc020660b, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2270, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x227d, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, 0xffffff7f}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) 15:30:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2271, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000280), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x44, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xffffffc5}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x80000000, 0x1ff, 0x7}}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_LOCAL={0x8, 0x2, @remote}]}, 0x44}}, 0x0) 15:30:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x5d, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2271, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x227e, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) 15:30:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000280), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x44, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xffffffc5}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x80000000, 0x1ff, 0x7}}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_LOCAL={0x8, 0x2, @remote}]}, 0x44}}, 0x0) 15:30:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2272, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2272, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0xffffff7f}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) 15:30:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x227f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x2, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000280), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x44, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xffffffc5}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x80000000, 0x1ff, 0x7}}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_LOCAL={0x8, 0x2, @remote}]}, 0x44}}, 0x0) 15:30:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xb, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) 15:30:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x3, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2276, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2276, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2282, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x44, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xffffffc5}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x80000000, 0x1ff, 0x7}}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_LOCAL={0x8, 0x2, @remote}]}, 0x44}}, 0x0) 15:30:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x7ffff000}, 0x18}}, 0x0) 15:30:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x4, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2283, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2279, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2279, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x44, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xffffffc5}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x80000000, 0x1ff, 0x7}}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_LOCAL={0x8, 0x2, @remote}]}, 0x44}}, 0x0) 15:30:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) 15:30:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2284, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x44, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xffffffc5}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x80000000, 0x1ff, 0x7}}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_LOCAL={0x8, 0x2, @remote}]}, 0x44}}, 0x0) 15:30:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x5, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x227a, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x227a, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x0, 0xffffff7f}, 0x18}}, 0x0) 15:30:01 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x44, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xffffffc5}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x80000000, 0x1ff, 0x7}}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_LOCAL={0x8, 0x2, @remote}]}, 0x44}}, 0x0) 15:30:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x227b, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x227b, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x6, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) 15:30:01 executing program 1: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x44, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xffffffc5}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x80000000, 0x1ff, 0x7}}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_LOCAL={0x8, 0x2, @remote}]}, 0x44}}, 0x0) 15:30:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x227c, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x227c, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x7, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x0, 0x0, 0xffffff7f}, 0x18}}, 0x0) 15:30:01 executing program 1: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x44, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xffffffc5}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x80000000, 0x1ff, 0x7}}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_LOCAL={0x8, 0x2, @remote}]}, 0x44}}, 0x0) 15:30:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x227d, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x227d, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x300, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2287, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x0, 0x0, 0x0, {0x10}}, 0x18}}, 0x0) 15:30:01 executing program 1: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x44, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xffffffc5}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x80000000, 0x1ff, 0x7}}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_LOCAL={0x8, 0x2, @remote}]}, 0x44}}, 0x0) 15:30:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x227e, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x227e, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x500, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2288, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x7ffff000}}, 0x0) 15:30:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 15:30:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x227f, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x600, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x227f, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2289, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x7ffffffff000}}, 0x0) 15:30:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 15:30:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2282, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x700, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2282, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}, 0x8}, 0x0) 15:30:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5382, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 15:30:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2283, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0xff00, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2283, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}, 0x300}, 0x0) 15:30:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x44, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xffffffc5}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x80000000, 0x1ff, 0x7}}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_LOCAL={0x8, 0x2, @remote}]}, 0x44}}, 0x0) 15:30:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2284, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x1000000, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2284, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}, 0x1, 0xffffff7f}, 0x0) 15:30:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5386, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x2000000, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 15:30:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x541b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}, 0x1, 0xffffff7f00000000}, 0x0) 15:30:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 15:30:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x3000000, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5421, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}, 0x1, 0x0, 0xffffff7f}, 0x0) 15:30:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 15:30:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2287, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2287, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x4000000, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5450, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 15:30:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 15:30:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2288, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2288, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x5000000, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5451, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) 15:30:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 15:30:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2289, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2289, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x6000000, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 15:30:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 15:30:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5382, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5309, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x7000000, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5460, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x44, 0x14, 0x0, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xffffffc5}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x80000000, 0x1ff, 0x7}}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_LOCAL={0x8, 0x2, @remote}]}, 0x44}}, 0x0) 15:30:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0xffffff7f) 15:30:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5319, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0xfdfdffff, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x8933, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x44, 0x14, 0x0, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xffffffc5}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x80000000, 0x1ff, 0x7}}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_LOCAL={0x8, 0x2, @remote}]}, 0x44}}, 0x0) 15:30:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5386, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0xffffff7f00000000) 15:30:03 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5380, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0xff000000, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x400448c9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x44, 0x14, 0x0, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xffffffc5}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x80000000, 0x1ff, 0x7}}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_LOCAL={0x8, 0x2, @remote}]}, 0x44}}, 0x0) 15:30:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x541b, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x1407, 0x0, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0xf6, 0x2000) ioctl$NBD_DO_IT(r1, 0xab03) 15:30:03 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5381, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0xfffffdfd, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x400448dd, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x3c, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xffffffc5}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x80000000, 0x1ff, 0x7}}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x3c}}, 0x0) 15:30:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5421, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x1407, 0x0, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x18}}, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0xf6, 0x2000) ioctl$NBD_DO_IT(r1, 0xab03) 15:30:03 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5382, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x400454ca, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x3c, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xffffffc5}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x80000000, 0x1ff, 0x7}}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x3c}}, 0x0) 15:30:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0xffffff7f, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5450, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x1407, 0x0, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x18}}, 0x0) syz_open_dev$vcsn(&(0x7f0000000100), 0xf6, 0x2000) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0xf6, 0x2000) ioctl$NBD_DO_IT(r1, 0xab03) 15:30:03 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5386, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x40049409, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x3c, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xffffffc5}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x80000000, 0x1ff, 0x7}}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x3c}}, 0x0) 15:30:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5451, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5387, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x40086602, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 5: ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000001c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.pending_reads\x00', 0x101200, 0x116) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$I2C_SLAVE(r2, 0x703, 0xd6) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000280)={r3, 0x4, 0x9, 0xff, 0x101, 0x80000001, 0x2c, 0x7, 0x80000001, 0xffff3ade, 0x8}) write$apparmor_exec(r1, &(0x7f0000000140)={'exec ', '}%-.o\xba@(\x00'}, 0xe) 15:30:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x3c, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xffffffc5}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x80000000, 0x1ff, 0x7}}, @IFA_LOCAL={0x8, 0x2, @remote}]}, 0x3c}}, 0x0) 15:30:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x2, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x40186366, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xffffffc5}, @IFA_LOCAL={0x8, 0x2, @remote}]}, 0x28}}, 0x0) 15:30:03 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5393, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 5: ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000001c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) (async) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.pending_reads\x00', 0x101200, 0x116) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$I2C_SLAVE(r2, 0x703, 0xd6) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000280)={r3, 0x4, 0x9, 0xff, 0x101, 0x80000001, 0x2c, 0x7, 0x80000001, 0xffff3ade, 0x8}) (async) write$apparmor_exec(r1, &(0x7f0000000140)={'exec ', '}%-.o\xba@(\x00'}, 0xe) 15:30:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x3, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x401c5820, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x541b, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 5: ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000001c0)) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) (async) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.pending_reads\x00', 0x101200, 0x116) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$I2C_SLAVE(r2, 0x703, 0xd6) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000280)={r3, 0x4, 0x9, 0xff, 0x101, 0x80000001, 0x2c, 0x7, 0x80000001, 0xffff3ade, 0x8}) (async) write$apparmor_exec(r1, &(0x7f0000000140)={'exec ', '}%-.o\xba@(\x00'}, 0xe) 15:30:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @remote}]}, 0x20}}, 0x0) 15:30:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5460, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x4, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5421, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x4020940d, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0xfdfdffff, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) 15:30:03 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5450, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x8933, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0xfdfdffff, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x80086301, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x5, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) 15:30:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x400448c9, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0xfdfdffff, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5451, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x80086601, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) 15:30:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x400448dd, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x7, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) 15:30:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x801c581f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x400454ca, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 5: sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x4044) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) 15:30:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5460, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) 15:30:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0xc0045878, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x40049409, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 5: sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x4044) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x4044) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) (async) 15:30:04 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) 15:30:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x2, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x8933, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0xc0045878, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x40086602, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 5: sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x4044) (async) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x4044) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) 15:30:04 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0xfdfdffff, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x3, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x400448c9, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0xc0189436, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x40186366, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0xfdfdffff, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000100)=0x80) 15:30:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x4, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x400448dd, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x401c5820, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0xc020660b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x5, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0xfdfdffff, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 5: socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000100)=0x80) 15:30:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x400454ca, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x6, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0xc0481273, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x4020940d, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)={0x53, 0xfdfdffff, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x40049409, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 5: socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000100)=0x80) 15:30:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x80086301, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x7, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x5452, 0x0) 15:30:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x40086602, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x2, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x80086601, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x1) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000400)={0x0, 0xfffffffffffffffb, 0x9d, 0x9, @buffer={0x0, 0x3c, &(0x7f00000001c0)=""/60}, &(0x7f0000000200)="2e95b502e414d6891ed9cc9c47d4167bad46685cb10c6976b955b2a33ee295a09cf98659229a08066432559d7e0164fb68004dfbf4ff1350ce987cd958a520da8e68ee754e2f2e8f5c99f0645f1c1c8148d7d81f3d18a5319d1e3de6172b47a2f75be9d359681c52a12a444298d165bc13e5e3b24fc9eb5b417b187b17591ab3b6f1c3b7647aa2624be4af17d0466344ec2b3236220bcf3d42e5b5f7f4", &(0x7f00000002c0)=""/249, 0x9, 0x21, 0x9b, &(0x7f00000003c0)}) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="8e9de53184ef8f17849f368c432dc5e64b9bbca7df910184888cf74d24c6fe876a566a6f96c7626a0b8d12addc7c55eccb8c32a75d0378a069aa97b5735caa091d594791be8e98c6928e56b27513082c08fe609648ea271f85608e2e7060143be84f3e76968f4241ef9455ca826e39f63885285c419d02d53f81f4a08e412e58d0687a8b6ac6c6e4545d280a31260fd4b413530e54f9a9c979e7d58654af93e074151cb88b4fead719233b14", @ANYRES32=0x0], 0x18}}, 0x0) 15:30:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x40186366, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x5452, 0x0) 15:30:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x801c581f, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x2, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x1) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000400)={0x0, 0xfffffffffffffffb, 0x9d, 0x9, @buffer={0x0, 0x3c, &(0x7f00000001c0)=""/60}, &(0x7f0000000200)="2e95b502e414d6891ed9cc9c47d4167bad46685cb10c6976b955b2a33ee295a09cf98659229a08066432559d7e0164fb68004dfbf4ff1350ce987cd958a520da8e68ee754e2f2e8f5c99f0645f1c1c8148d7d81f3d18a5319d1e3de6172b47a2f75be9d359681c52a12a444298d165bc13e5e3b24fc9eb5b417b187b17591ab3b6f1c3b7647aa2624be4af17d0466344ec2b3236220bcf3d42e5b5f7f4", &(0x7f00000002c0)=""/249, 0x9, 0x21, 0x9b, &(0x7f00000003c0)}) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="8e9de53184ef8f17849f368c432dc5e64b9bbca7df910184888cf74d24c6fe876a566a6f96c7626a0b8d12addc7c55eccb8c32a75d0378a069aa97b5735caa091d594791be8e98c6928e56b27513082c08fe609648ea271f85608e2e7060143be84f3e76968f4241ef9455ca826e39f63885285c419d02d53f81f4a08e412e58d0687a8b6ac6c6e4545d280a31260fd4b413530e54f9a9c979e7d58654af93e074151cb88b4fead719233b14", @ANYRES32=0x0], 0x18}}, 0x0) 15:30:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x401c5820, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0xc0045878, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x1) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000400)={0x0, 0xfffffffffffffffb, 0x9d, 0x9, @buffer={0x0, 0x3c, &(0x7f00000001c0)=""/60}, &(0x7f0000000200)="2e95b502e414d6891ed9cc9c47d4167bad46685cb10c6976b955b2a33ee295a09cf98659229a08066432559d7e0164fb68004dfbf4ff1350ce987cd958a520da8e68ee754e2f2e8f5c99f0645f1c1c8148d7d81f3d18a5319d1e3de6172b47a2f75be9d359681c52a12a444298d165bc13e5e3b24fc9eb5b417b187b17591ab3b6f1c3b7647aa2624be4af17d0466344ec2b3236220bcf3d42e5b5f7f4", &(0x7f00000002c0)=""/249, 0x9, 0x21, 0x9b, &(0x7f00000003c0)}) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="8e9de53184ef8f17849f368c432dc5e64b9bbca7df910184888cf74d24c6fe876a566a6f96c7626a0b8d12addc7c55eccb8c32a75d0378a069aa97b5735caa091d594791be8e98c6928e56b27513082c08fe609648ea271f85608e2e7060143be84f3e76968f4241ef9455ca826e39f63885285c419d02d53f81f4a08e412e58d0687a8b6ac6c6e4545d280a31260fd4b413530e54f9a9c979e7d58654af93e074151cb88b4fead719233b14", @ANYRES32=0x0], 0x18}}, 0x0) 15:30:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x5452, 0x0) 15:30:05 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x3, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x4020940d, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0xc0045878, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 5: socket$nl_rdma(0x10, 0x3, 0x14) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x1402, 0x10, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40804}, 0x4011) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) 15:30:05 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x4, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)={0x0, 0xfdfdffff, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x5, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0xc0189436, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 5: socket$nl_rdma(0x10, 0x3, 0x14) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x1402, 0x10, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40804}, 0x4011) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) 15:30:05 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)={0x0, 0xfdfdffff, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x5, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x80086301, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0xc020660b, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 5: socket$nl_rdma(0x10, 0x3, 0x14) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x1402, 0x10, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40804}, 0x4011) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) (async) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x1402, 0x10, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40804}, 0x4011) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) (async) 15:30:05 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)={0x0, 0xfdfdffff, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x80086601, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x7, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x6, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0xc0481273, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x801c581f, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1a000000d86190cfd8afc473000000180600eaff", @ANYRES32=0x0], 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=@RTM_GETMDB={0x18, 0x56, 0x2, 0x70bd29, 0x25dfdbfb, {0x7, r2}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x2400c810}, 0x11) 15:30:05 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x7, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x5d, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1a000000d86190cfd8afc473000000180600eaff", @ANYRES32=0x0], 0x18}}, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=@RTM_GETMDB={0x18, 0x56, 0x2, 0x70bd29, 0x25dfdbfb, {0x7, r2}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x2400c810}, 0x11) 15:30:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0xc0045878, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x300, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x500, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x2, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0xc0045878, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x500, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0xc0189436, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x3, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1a000000d86190cfd8afc473000000180600eaff", @ANYRES32=0x0], 0x18}}, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=@RTM_GETMDB={0x18, 0x56, 0x2, 0x70bd29, 0x25dfdbfb, {0x7, r2}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x2400c810}, 0x11) 15:30:05 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x600, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0xc0189436, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0xc0189436, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x600, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x4, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x700, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) renameat(r1, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') 15:30:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0xc020660b, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x700, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0xc0189436, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0xc0481273, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0xff00, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x5, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0xff00, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) renameat(r1, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') 15:30:06 executing program 1: ioctl$SG_IO(0xffffffffffffffff, 0xc0189436, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x6, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0xf, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0xff0f, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 1: ioctl$SG_IO(0xffffffffffffffff, 0xc0189436, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) renameat(r1, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000001c0), 0x6, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) renameat(r1, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') (async) 15:30:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x7, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x5d, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x2, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x800000, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 1: ioctl$SG_IO(0xffffffffffffffff, 0xc0189436, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) 15:30:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x8, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x3, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0xc0189436, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x1000000, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x9, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) 15:30:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x2, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0xc0189436, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x4, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x2000000, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xd, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0xc0189436, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x3, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x5, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) 15:30:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xe, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x3000000, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x4, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0xc0189436, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x6, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x6, 0x6a57, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7800, 0x80, 0x7e8e, 0xfff}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x18}}, 0x0) 15:30:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x4000000, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x10, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x5, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0xc0189436, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x7, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x6, 0x6a57, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7800, 0x80, 0x7e8e, 0xfff}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x18}}, 0x0) 15:30:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x97, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x5000000, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x6, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x300, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 5: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x6, 0x6a57, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7800, 0x80, 0x7e8e, 0xfff}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x18}}, 0x0) 15:30:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x6000000, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0xc0189436, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xfe, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x7, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x500, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="cd357963461518000000140000007400000000000000026f000013552c166a247124accaf14018ba52c1c8e2ce932083a62e0986ac5a504bbca6815301e46fd0428e000000000000", @ANYRES32=0x0], 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getaddr={0x38, 0x16, 0x1, 0x70bd26, 0x25dfdbfe, {0x2, 0x38, 0x80, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x1f}, @IFA_LOCAL={0x8, 0x2, @empty}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010100}, @IFA_BROADCAST={0x8, 0x4, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='cq_process\x00'}, 0x10) 15:30:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x7000000, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x132, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0xc0189436, 0x0) 15:30:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x300, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x600, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x8000000, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="cd357963461518000000140000007400000000000000026f000013552c166a247124accaf14018ba52c1c8e2ce932083a62e0986ac5a504bbca6815301e46fd0428e000000000000", @ANYRES32=0x0], 0x18}}, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getaddr={0x38, 0x16, 0x1, 0x70bd26, 0x25dfdbfe, {0x2, 0x38, 0x80, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x1f}, @IFA_LOCAL={0x8, 0x2, @empty}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010100}, @IFA_BROADCAST={0x8, 0x4, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='cq_process\x00'}, 0x10) 15:30:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0xc0189436, 0x0) 15:30:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x500, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x300, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x700, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0xfdfdffff, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0xc0189436, 0x0) 15:30:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="cd357963461518000000140000007400000000000000026f000013552c166a247124accaf14018ba52c1c8e2ce932083a62e0986ac5a504bbca6815301e46fd0428e000000000000", @ANYRES32=0x0], 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getaddr={0x38, 0x16, 0x1, 0x70bd26, 0x25dfdbfe, {0x2, 0x38, 0x80, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x1f}, @IFA_LOCAL={0x8, 0x2, @empty}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010100}, @IFA_BROADCAST={0x8, 0x4, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='cq_process\x00'}, 0x10) 15:30:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x500, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0xff00, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x600, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0xff000000, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x600, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0xc0189436, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0x8000000000000001, 0x2000) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=@mpls_delroute={0xcc, 0x19, 0x10, 0x70bd25, 0x25dfdbfc, {0x1c, 0x80, 0x80, 0x6, 0xfe, 0x0, 0xff, 0x4, 0x100}, [@RTA_TTL_PROPAGATE={0x5}, @RTA_DST={0x8, 0x1, {0xc6, 0x0, 0x1}}, @RTA_NEWDST={0x84, 0x13, [{0x3ff, 0x0, 0x1}, {0x20, 0x0, 0x1}, {0xffffc, 0x0, 0x1}, {0x8}, {0x1, 0x0, 0x1}, {0x6}, {0x20}, {0x7fff}, {0x1ff}, {0x0, 0x0, 0x1}, {0x1}, {0x400, 0x0, 0x1}, {0x800}, {0x0, 0x0, 0x1}, {0xffffe}, {0x8000, 0x0, 0x1}, {0x8}, {0x400}, {0x1}, {0x3}, {0x3}, {0x9}, {0x800}, {0x100, 0x0, 0x1}, {0x401}, {0x6}, {0x3f}, {0x800, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x9}, {0xfffe0, 0x0, 0x1}]}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x2, 0x5}}, @RTA_DST={0x8, 0x1, {0x1, 0x0, 0x1}}]}, 0xcc}}, 0x0) 15:30:07 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x1000000, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x700, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0xff0f0000, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0xc0189436, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x700, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x2000000, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 5: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0x8000000000000001, 0x2000) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=@mpls_delroute={0xcc, 0x19, 0x10, 0x70bd25, 0x25dfdbfc, {0x1c, 0x80, 0x80, 0x6, 0xfe, 0x0, 0xff, 0x4, 0x100}, [@RTA_TTL_PROPAGATE={0x5}, @RTA_DST={0x8, 0x1, {0xc6, 0x0, 0x1}}, @RTA_NEWDST={0x84, 0x13, [{0x3ff, 0x0, 0x1}, {0x20, 0x0, 0x1}, {0xffffc, 0x0, 0x1}, {0x8}, {0x1, 0x0, 0x1}, {0x6}, {0x20}, {0x7fff}, {0x1ff}, {0x0, 0x0, 0x1}, {0x1}, {0x400, 0x0, 0x1}, {0x800}, {0x0, 0x0, 0x1}, {0xffffe}, {0x8000, 0x0, 0x1}, {0x8}, {0x400}, {0x1}, {0x3}, {0x3}, {0x9}, {0x800}, {0x100, 0x0, 0x1}, {0x401}, {0x6}, {0x3f}, {0x800, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x9}, {0xfffe0, 0x0, 0x1}]}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x2, 0x5}}, @RTA_DST={0x8, 0x1, {0x1, 0x0, 0x1}}]}, 0xcc}}, 0x0) 15:30:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0xfffffdfd, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0xff00, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0xc0189436, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0x8000000000000001, 0x2000) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=@mpls_delroute={0xcc, 0x19, 0x10, 0x70bd25, 0x25dfdbfc, {0x1c, 0x80, 0x80, 0x6, 0xfe, 0x0, 0xff, 0x4, 0x100}, [@RTA_TTL_PROPAGATE={0x5}, @RTA_DST={0x8, 0x1, {0xc6, 0x0, 0x1}}, @RTA_NEWDST={0x84, 0x13, [{0x3ff, 0x0, 0x1}, {0x20, 0x0, 0x1}, {0xffffc, 0x0, 0x1}, {0x8}, {0x1, 0x0, 0x1}, {0x6}, {0x20}, {0x7fff}, {0x1ff}, {0x0, 0x0, 0x1}, {0x1}, {0x400, 0x0, 0x1}, {0x800}, {0x0, 0x0, 0x1}, {0xffffe}, {0x8000, 0x0, 0x1}, {0x8}, {0x400}, {0x1}, {0x3}, {0x3}, {0x9}, {0x800}, {0x100, 0x0, 0x1}, {0x401}, {0x6}, {0x3f}, {0x800, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x9}, {0xfffe0, 0x0, 0x1}]}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x2, 0x5}}, @RTA_DST={0x8, 0x1, {0x1, 0x0, 0x1}}]}, 0xcc}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000100), 0x8000000000000001, 0x2000) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=@mpls_delroute={0xcc, 0x19, 0x10, 0x70bd25, 0x25dfdbfc, {0x1c, 0x80, 0x80, 0x6, 0xfe, 0x0, 0xff, 0x4, 0x100}, [@RTA_TTL_PROPAGATE={0x5}, @RTA_DST={0x8, 0x1, {0xc6, 0x0, 0x1}}, @RTA_NEWDST={0x84, 0x13, [{0x3ff, 0x0, 0x1}, {0x20, 0x0, 0x1}, {0xffffc, 0x0, 0x1}, {0x8}, {0x1, 0x0, 0x1}, {0x6}, {0x20}, {0x7fff}, {0x1ff}, {0x0, 0x0, 0x1}, {0x1}, {0x400, 0x0, 0x1}, {0x800}, {0x0, 0x0, 0x1}, {0xffffe}, {0x8000, 0x0, 0x1}, {0x8}, {0x400}, {0x1}, {0x3}, {0x3}, {0x9}, {0x800}, {0x100, 0x0, 0x1}, {0x401}, {0x6}, {0x3f}, {0x800, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x9}, {0xfffe0, 0x0, 0x1}]}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x2, 0x5}}, @RTA_DST={0x8, 0x1, {0x1, 0x0, 0x1}}]}, 0xcc}}, 0x0) (async) 15:30:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x1000000, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x3000000, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0xffffff7f, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x900, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0xc0189436, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x4000000, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.log\x00', 0x408000, 0x171) mknodat$null(r1, &(0x7f0000000200)='./file0\x00', 0x200, 0x103) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_io_uring_setup(0x3b82, &(0x7f0000000240)={0x0, 0x4e4f, 0x200, 0x0, 0x1b3, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000100)={0x41424344, 0x41424344}, 0x1, 0x0) write$tun(r2, &(0x7f0000000140)={@void, @void, @ipv4=@tcp={{0x5, 0x4, 0x1, 0x3, 0x72, 0x65, 0x0, 0x1e, 0x6, 0x0, @broadcast, @private=0xa010100}, {{0x4e23, 0x4e20, r3, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x8, 0x0, 0xfff}, {"55dde6964486e61e16fb97b78da0ed0dfe21a271683101423d9b49cfc3922e009994e8e60453a8b39bddc29b0155e41bdd1df99b41a244ccf60a5966ff29b3b2e9148c78cb91a7adfe72"}}}}, 0x72) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 15:30:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x2000000, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xd00, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0xc0189436, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x3000000, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x5000000, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.log\x00', 0x408000, 0x171) mknodat$null(r1, &(0x7f0000000200)='./file0\x00', 0x200, 0x103) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_io_uring_setup(0x3b82, &(0x7f0000000240)={0x0, 0x4e4f, 0x200, 0x0, 0x1b3, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000000100)={0x41424344, 0x41424344}, 0x1, 0x0) write$tun(r2, &(0x7f0000000140)={@void, @void, @ipv4=@tcp={{0x5, 0x4, 0x1, 0x3, 0x72, 0x65, 0x0, 0x1e, 0x6, 0x0, @broadcast, @private=0xa010100}, {{0x4e23, 0x4e20, r3, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x8, 0x0, 0xfff}, {"55dde6964486e61e16fb97b78da0ed0dfe21a271683101423d9b49cfc3922e009994e8e60453a8b39bddc29b0155e41bdd1df99b41a244ccf60a5966ff29b3b2e9148c78cb91a7adfe72"}}}}, 0x72) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 15:30:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xe00, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x4000000, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0xfdfdffff, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x6000000, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x1f00, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x5000000, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.log\x00', 0x408000, 0x171) mknodat$null(r1, &(0x7f0000000200)='./file0\x00', 0x200, 0x103) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_io_uring_setup(0x3b82, &(0x7f0000000240)={0x0, 0x4e4f, 0x200, 0x0, 0x1b3, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000100)={0x41424344, 0x41424344}, 0x1, 0x0) write$tun(r2, &(0x7f0000000140)={@void, @void, @ipv4=@tcp={{0x5, 0x4, 0x1, 0x3, 0x72, 0x65, 0x0, 0x1e, 0x6, 0x0, @broadcast, @private=0xa010100}, {{0x4e23, 0x4e20, r3, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x8, 0x0, 0xfff}, {"55dde6964486e61e16fb97b78da0ed0dfe21a271683101423d9b49cfc3922e009994e8e60453a8b39bddc29b0155e41bdd1df99b41a244ccf60a5966ff29b3b2e9148c78cb91a7adfe72"}}}}, 0x72) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 15:30:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x7000000, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0xfdfdffff, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x2000, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x6000000, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x5, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800000014000000000000000000000002000000fb07ab01591f2852b3341d9d95b99aabd656d02e2b415e89f9524815bb80f56153b04040046eea490db41ec08711a9c130cedc489bfcf4e0d9ceeafe58ad781d31c6195623d46744c01e06130098d3f0eec923c3c6fdb9a6a3eea92666829baec6dc40315364d377b8e5f41658c30a035cfdaf2c4c4462b83ba734ba5d2c51d87523738e3c1a9a67727d7ce2db3eef43a3373d420aed4b066506ecf033d46b0af2d8a407c9242d3ca6bed5d0ce06aa103af117fc85ebac52", @ANYRES32=0x0], 0x18}}, 0x0) 15:30:07 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0xfdfdffff, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x3201, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0xfdfdffff, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 5: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800000014000000000000000000000002000000fb07ab01591f2852b3341d9d95b99aabd656d02e2b415e89f9524815bb80f56153b04040046eea490db41ec08711a9c130cedc489bfcf4e0d9ceeafe58ad781d31c6195623d46744c01e06130098d3f0eec923c3c6fdb9a6a3eea92666829baec6dc40315364d377b8e5f41658c30a035cfdaf2c4c4462b83ba734ba5d2c51d87523738e3c1a9a67727d7ce2db3eef43a3373d420aed4b066506ecf033d46b0af2d8a407c9242d3ca6bed5d0ce06aa103af117fc85ebac52", @ANYRES32=0x0], 0x18}}, 0x0) 15:30:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x6, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x7000000, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 1: ioctl$SG_IO(0xffffffffffffffff, 0x2275, &(0x7f00000002c0)={0xfdfdffff, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0xff000000, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x7, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x4000, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800000014000000000000000000000002000000fb07ab01591f2852b3341d9d95b99aabd656d02e2b415e89f9524815bb80f56153b04040046eea490db41ec08711a9c130cedc489bfcf4e0d9ceeafe58ad781d31c6195623d46744c01e06130098d3f0eec923c3c6fdb9a6a3eea92666829baec6dc40315364d377b8e5f41658c30a035cfdaf2c4c4462b83ba734ba5d2c51d87523738e3c1a9a67727d7ce2db3eef43a3373d420aed4b066506ecf033d46b0af2d8a407c9242d3ca6bed5d0ce06aa103af117fc85ebac52", @ANYRES32=0x0], 0x18}}, 0x0) 15:30:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0xff000000, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0xfffffdfd, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 1: ioctl$SG_IO(0xffffffffffffffff, 0x2275, &(0x7f00000002c0)={0xfdfdffff, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x9700, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 5: timer_create(0x6, &(0x7f0000000240)={0x0, 0x2b, 0x2, @thr={&(0x7f00000001c0)="e96c3871d7fd7140a763f5ac71447b23d9921e83cca9070ef6a116ec20fe68d06b9699409ed1eb3ba07c434c6f2db0147c4919bb09e4e6cae41e7c8a8c73fad0710a86e0ef4b0a4099e77049cd8dd9faebe5014a3641ff", &(0x7f0000000040)="9afdb569a0f040b037d5c0de130c50775438b12131"}}, &(0x7f0000000280)=0x0) timer_gettime(r0, &(0x7f00000002c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x8) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000001400000000000000000000000200000096f30be01ad5302b87733b048f58ff5f11fc664ad5cce793bbda03df85367f5147dcaaf3479b83b77e58d29fe1e5", @ANYRES32=0x0], 0x18}}, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000100)) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) 15:30:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0xffffff7f, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x8, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 1: ioctl$SG_IO(0xffffffffffffffff, 0x2275, &(0x7f00000002c0)={0xfdfdffff, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0xffffff7f, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xfdfd, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 5: timer_create(0x6, &(0x7f0000000240)={0x0, 0x2b, 0x2, @thr={&(0x7f00000001c0)="e96c3871d7fd7140a763f5ac71447b23d9921e83cca9070ef6a116ec20fe68d06b9699409ed1eb3ba07c434c6f2db0147c4919bb09e4e6cae41e7c8a8c73fad0710a86e0ef4b0a4099e77049cd8dd9faebe5014a3641ff", &(0x7f0000000040)="9afdb569a0f040b037d5c0de130c50775438b12131"}}, &(0x7f0000000280)=0x0) timer_gettime(r0, &(0x7f00000002c0)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x8) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000001400000000000000000000000200000096f30be01ad5302b87733b048f58ff5f11fc664ad5cce793bbda03df85367f5147dcaaf3479b83b77e58d29fe1e5", @ANYRES32=0x0], 0x18}}, 0x0) (async) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000100)) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) 15:30:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x300, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0xfdfdffff, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xfe00, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 5: timer_create(0x6, &(0x7f0000000240)={0x0, 0x2b, 0x2, @thr={&(0x7f00000001c0)="e96c3871d7fd7140a763f5ac71447b23d9921e83cca9070ef6a116ec20fe68d06b9699409ed1eb3ba07c434c6f2db0147c4919bb09e4e6cae41e7c8a8c73fad0710a86e0ef4b0a4099e77049cd8dd9faebe5014a3641ff", &(0x7f0000000040)="9afdb569a0f040b037d5c0de130c50775438b12131"}}, &(0x7f0000000280)=0x0) timer_gettime(r0, &(0x7f00000002c0)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x8) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000001400000000000000000000000200000096f30be01ad5302b87733b048f58ff5f11fc664ad5cce793bbda03df85367f5147dcaaf3479b83b77e58d29fe1e5", @ANYRES32=0x0], 0x18}}, 0x0) (async) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000100)) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) 15:30:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x2, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) 15:30:08 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0xfdfdffff, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x500, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xff00, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x3, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newaddr={0x18, 0x14, 0x0, 0x0, 0x25dfdbfd}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x40d0) 15:30:08 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0xfdfdffff, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}) 15:30:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x600, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x20000, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x4, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0}) 15:30:08 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2275, &(0x7f00000002c0)={0xfdfdffff, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newaddr={0x18, 0x14, 0x0, 0x0, 0x25dfdbfd}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x40d0) 15:30:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x700, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x40000, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2275, &(0x7f00000002c0)={0xfdfdffff, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x5, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newaddr={0x18, 0x14, 0x0, 0x0, 0x25dfdbfd}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x40d0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newaddr={0x18, 0x14, 0x0, 0x0, 0x25dfdbfd}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x40d0) 15:30:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) 15:30:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0xff00, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0xff0f, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2275, &(0x7f00000002c0)={0xfdfdffff, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x200000, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 15:30:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}) 15:30:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x7, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x1000000, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}) 15:30:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, 0x0) 15:30:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x800000, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) 15:30:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0}) 15:30:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, 0x0) 15:30:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x2000000, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x2, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x1000000, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x3000000, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0}) 15:30:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, 0x0) 15:30:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x4000000, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x2000000, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 15:30:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x3, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0}) 15:30:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x5000000, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x6000000, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x3000000, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0}) 15:30:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x4, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xfe73a) syz_open_dev$usbmon(&(0x7f0000000100), 0xffff7ffffffffff9, 0x24a6c0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000140000000000000000af5c2cd8000000", @ANYRES32=0x0, @ANYBLOB="08000200ac14142b08000400ac1414bb"], 0x28}}, 0x0) 15:30:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) (async) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xfe73a) syz_open_dev$usbmon(&(0x7f0000000100), 0xffff7ffffffffff9, 0x24a6c0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000140000000000000000af5c2cd8000000", @ANYRES32=0x0, @ANYBLOB="08000200ac14142b08000400ac1414bb"], 0x28}}, 0x0) 15:30:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x7000000, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xff00, 0x0, 0x0, 0x0}) 15:30:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x4000000, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x5, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x8000000, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xfe73a) syz_open_dev$usbmon(&(0x7f0000000100), 0xffff7ffffffffff9, 0x24a6c0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000140000000000000000af5c2cd8000000", @ANYRES32=0x0, @ANYBLOB="08000200ac14142b08000400ac1414bb"], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) (async) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xfe73a) (async) syz_open_dev$usbmon(&(0x7f0000000100), 0xffff7ffffffffff9, 0x24a6c0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000140000000000000000af5c2cd8000000", @ANYRES32=0x0, @ANYBLOB="08000200ac14142b08000400ac1414bb"], 0x28}}, 0x0) (async) 15:30:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x6, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0}) 15:30:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x5000000, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0}) 15:30:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x9000000, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x7, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x5000000, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x6000000, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x200, 0x70bd28}, 0x18}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x8f, 0x9, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, 0x8047, 0x8, 0xffffffff, 0x2}}) 15:30:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xe00, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0}) 15:30:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xd000000, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x7000000, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x200, 0x70bd28}, 0x18}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x8f, 0x9, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, 0x8047, 0x8, 0xffffffff, 0x2}}) 15:30:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0}) 15:30:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x2, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xe000000, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x8000000, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x200, 0x70bd28}, 0x18}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x8f, 0x9, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, 0x8047, 0x8, 0xffffffff, 0x2}}) 15:30:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xfe, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x3, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x10000000, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0}) 15:30:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0xfdfdffff, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x3, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x4, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) r3 = getpgrp(0x0) sched_rr_get_interval(r3, &(0x7f0000000000)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) r5 = getpgrp(0xffffffffffffffff) r6 = getpgrp(0x0) sched_rr_get_interval(r6, &(0x7f0000000000)) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x174, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x174}, 0x1, 0x0, 0x0, 0x8000}, 0x200440c0) 15:30:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x1f000000, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0}) 15:30:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0xff000000, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) r3 = getpgrp(0x0) sched_rr_get_interval(r3, &(0x7f0000000000)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) r5 = getpgrp(0xffffffffffffffff) r6 = getpgrp(0x0) sched_rr_get_interval(r6, &(0x7f0000000000)) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x174, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x174}, 0x1, 0x0, 0x0, 0x8000}, 0x200440c0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) (async) getpgrp(0x0) (async) sched_rr_get_interval(r3, &(0x7f0000000000)) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) (async) getpgrp(0xffffffffffffffff) (async) getpgrp(0x0) (async) sched_rr_get_interval(r6, &(0x7f0000000000)) (async) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x174, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x174}, 0x1, 0x0, 0x0, 0x8000}, 0x200440c0) (async) 15:30:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x7, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0}) 15:30:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x5, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x32010000, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0xff0f0000, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0}) 15:30:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) getpgrp(0x0) (async) r3 = getpgrp(0x0) sched_rr_get_interval(r3, &(0x7f0000000000)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) r5 = getpgrp(0xffffffffffffffff) r6 = getpgrp(0x0) sched_rr_get_interval(r6, &(0x7f0000000000)) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x174, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x174}, 0x1, 0x0, 0x0, 0x8000}, 0x200440c0) (async) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x174, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x174}, 0x1, 0x0, 0x0, 0x8000}, 0x200440c0) 15:30:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x40000000, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x6, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0}) 15:30:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0xfffffdfd, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x97000000, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x27}}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 15:30:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0}) 15:30:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x7, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0xffffff7f, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xff000000, 0x0, 0x0, 0x0}) 15:30:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x27}}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 15:30:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xf5ffffff, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 15:30:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x500, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0}) 15:30:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xf6ffffff, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x27}}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 15:30:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x3, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xfbffffff, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x600, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0}) 15:30:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x0, 0x3, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x3, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@getnexthop={0x3c, 0x6a, 0x409, 0x70bd2b, 0x25dfdbfb, {}, [@NHA_ID={0x8}, @NHA_ID={0x8}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_GROUPS={0x4}]}, 0x3c}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) sendmsg$can_j1939(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x1d, r2, 0x0, {0x2, 0xff, 0x4}, 0x2}, 0x18, &(0x7f00000004c0)={&(0x7f0000000480)="6e2c289c258a7eaa", 0x8}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000804) 15:30:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x700, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xfcffffff, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x2, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 5: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@getnexthop={0x3c, 0x6a, 0x409, 0x70bd2b, 0x25dfdbfb, {}, [@NHA_ID={0x8}, @NHA_ID={0x8}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_GROUPS={0x4}]}, 0x3c}}, 0x0) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) sendmsg$can_j1939(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x1d, r2, 0x0, {0x2, 0xff, 0x4}, 0x2}, 0x18, &(0x7f00000004c0)={&(0x7f0000000480)="6e2c289c258a7eaa", 0x8}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000804) 15:30:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xfdfdffff, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0}) 15:30:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0xff00, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x2, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@getnexthop={0x3c, 0x6a, 0x409, 0x70bd2b, 0x25dfdbfb, {}, [@NHA_ID={0x8}, @NHA_ID={0x8}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_GROUPS={0x4}]}, 0x3c}}, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) sendmsg$can_j1939(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x1d, r2, 0x0, {0x2, 0xff, 0x4}, 0x2}, 0x18, &(0x7f00000004c0)={&(0x7f0000000480)="6e2c289c258a7eaa", 0x8}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000804) 15:30:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xfe000000, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}) 15:30:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x0, 0x5, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0xfdfdffff, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 1) 15:30:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="0800000014000021000000000000020000000000", @ANYRES32=0x0], 0x18}}, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000100)={@id={0x2, 0x0, @b}, 0x40, 0x0, '\x00', @b}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4041}, 0x800) 15:30:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x2, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}) 15:30:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xfeffffff, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2362.492555][T14472] FAULT_INJECTION: forcing a failure. [ 2362.492555][T14472] name failslab, interval 1, probability 0, space 0, times 0 15:30:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x3, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0}) 15:30:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="0800000014000021000000000000020000000000", @ANYRES32=0x0], 0x18}}, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000100)={@id={0x2, 0x0, @b}, 0x40, 0x0, '\x00', @b}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4041}, 0x800) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="0800000014000021000000000000020000000000", @ANYRES32=0x0], 0x18}}, 0x0) (async) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000100)={@id={0x2, 0x0, @b}, 0x40, 0x0, '\x00', @b}) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4041}, 0x800) (async) 15:30:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x0, 0x7, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2362.574293][T14472] CPU: 1 PID: 14472 Comm: syz-executor.1 Not tainted 6.2.0-syzkaller-12765-g982818426a0f #0 [ 2362.584509][T14472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2362.594620][T14472] Call Trace: [ 2362.597940][T14472] [ 2362.600914][T14472] dump_stack_lvl+0x136/0x150 [ 2362.605665][T14472] should_fail_ex+0x4a3/0x5b0 [ 2362.610765][T14472] should_failslab+0x9/0x20 [ 2362.615329][T14472] __kmem_cache_alloc_node+0x5b/0x330 [ 2362.620775][T14472] ? tomoyo_realpath_from_path+0xc3/0x600 [ 2362.626569][T14472] ? tomoyo_realpath_from_path+0xc3/0x600 [ 2362.632364][T14472] __kmalloc+0x4a/0xd0 [ 2362.636494][T14472] tomoyo_realpath_from_path+0xc3/0x600 [ 2362.642075][T14472] ? tomoyo_profile+0x46/0x60 [ 2362.646873][T14472] tomoyo_path_number_perm+0x217/0x570 [ 2362.652357][T14472] ? tomoyo_path_number_perm+0x1c1/0x570 [ 2362.658034][T14472] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2362.663888][T14472] ? wait_for_completion_io_timeout+0x20/0x20 [ 2362.670028][T14472] ? __fget_files+0x26a/0x480 [ 2362.674775][T14472] security_file_ioctl+0x54/0xb0 [ 2362.679792][T14472] __x64_sys_ioctl+0xb7/0x210 [ 2362.684515][T14472] do_syscall_64+0x39/0xb0 [ 2362.689044][T14472] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2362.694987][T14472] RIP: 0033:0x7f1097e8c0f9 [ 2362.699462][T14472] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 15:30:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xff000000, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2362.719231][T14472] RSP: 002b:00007f1098bfd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2362.727669][T14472] RAX: ffffffffffffffda RBX: 00007f1097fabf80 RCX: 00007f1097e8c0f9 [ 2362.735670][T14472] RDX: 00000000200002c0 RSI: 0000000000002275 RDI: 0000000000000003 [ 2362.743671][T14472] RBP: 00007f1098bfd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2362.751914][T14472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2362.759896][T14472] R13: 00007f10980cfb1f R14: 00007f1098bfd300 R15: 0000000000022000 [ 2362.767898][T14472] 15:30:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x4, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0xfdfdffff, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 2) 15:30:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0}) 15:30:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="0800000014000021000000000000020000000000", @ANYRES32=0x0], 0x18}}, 0x0) (async) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000100)={@id={0x2, 0x0, @b}, 0x40, 0x0, '\x00', @b}) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4041}, 0x800) 15:30:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xfffffdfd, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x5, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2362.866513][T14472] ERROR: Out of memory at tomoyo_realpath_from_path. 15:30:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x6, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0}) 15:30:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xffffff7f, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb0, r2, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3d, 0x20}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xb0}}, 0x1fec761740cdd609) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000300)='.pending_reads\x00', 0x3002, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) 15:30:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x7, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2363.024883][T14509] FAULT_INJECTION: forcing a failure. [ 2363.024883][T14509] name failslab, interval 1, probability 0, space 0, times 0 [ 2363.127646][T14509] CPU: 1 PID: 14509 Comm: syz-executor.1 Not tainted 6.2.0-syzkaller-12765-g982818426a0f #0 [ 2363.137810][T14509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2363.148003][T14509] Call Trace: [ 2363.151312][T14509] [ 2363.154266][T14509] dump_stack_lvl+0x136/0x150 [ 2363.158997][T14509] should_fail_ex+0x4a3/0x5b0 [ 2363.163730][T14509] should_failslab+0x9/0x20 [ 2363.168286][T14509] __kmem_cache_alloc_node+0x5b/0x330 [ 2363.173720][T14509] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 2363.179169][T14509] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 2363.184603][T14509] __kmalloc+0x4a/0xd0 [ 2363.188727][T14509] tomoyo_encode2.part.0+0xe9/0x3a0 [ 2363.193981][T14509] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2363.199586][T14509] tomoyo_encode+0x2c/0x50 [ 2363.204058][T14509] tomoyo_realpath_from_path+0x185/0x600 [ 2363.209766][T14509] tomoyo_path_number_perm+0x217/0x570 [ 2363.215281][T14509] ? tomoyo_path_number_perm+0x1c1/0x570 [ 2363.220976][T14509] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2363.226874][T14509] ? wait_for_completion_io_timeout+0x20/0x20 [ 2363.233032][T14509] ? __fget_files+0x26a/0x480 [ 2363.237768][T14509] security_file_ioctl+0x54/0xb0 [ 2363.242769][T14509] __x64_sys_ioctl+0xb7/0x210 [ 2363.247507][T14509] do_syscall_64+0x39/0xb0 [ 2363.251988][T14509] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2363.257937][T14509] RIP: 0033:0x7f1097e8c0f9 [ 2363.262400][T14509] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2363.282051][T14509] RSP: 002b:00007f1098bfd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2363.290513][T14509] RAX: ffffffffffffffda RBX: 00007f1097fabf80 RCX: 00007f1097e8c0f9 [ 2363.298529][T14509] RDX: 00000000200002c0 RSI: 0000000000002275 RDI: 0000000000000003 [ 2363.306541][T14509] RBP: 00007f1098bfd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2363.314562][T14509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2363.322583][T14509] R13: 00007f10980cfb1f R14: 00007f1098bfd300 R15: 0000000000022000 [ 2363.330787][T14509] [ 2363.339817][T14509] ERROR: Out of memory at tomoyo_realpath_from_path. 15:30:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0xfdfdffff, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 3) 15:30:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xfffffff5, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}) 15:30:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) (async, rerun: 32) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb0, r2, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3d, 0x20}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xb0}}, 0x1fec761740cdd609) (async, rerun: 32) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000300)='.pending_reads\x00', 0x3002, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) 15:30:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x300, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x500, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0}) 15:30:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xfffffff6, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2363.437220][T14533] FAULT_INJECTION: forcing a failure. [ 2363.437220][T14533] name failslab, interval 1, probability 0, space 0, times 0 15:30:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) (async) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb0, r2, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3d, 0x20}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xb0}}, 0x1fec761740cdd609) (async) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000300)='.pending_reads\x00', 0x3002, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) 15:30:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2363.549385][T14533] CPU: 1 PID: 14533 Comm: syz-executor.1 Not tainted 6.2.0-syzkaller-12765-g982818426a0f #0 [ 2363.559548][T14533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2363.569641][T14533] Call Trace: [ 2363.572956][T14533] [ 2363.575928][T14533] dump_stack_lvl+0x136/0x150 [ 2363.580673][T14533] should_fail_ex+0x4a3/0x5b0 [ 2363.585422][T14533] should_failslab+0x9/0x20 [ 2363.589983][T14533] __kmem_cache_alloc_node+0x5b/0x330 [ 2363.595487][T14533] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 2363.600931][T14533] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 2363.606358][T14533] __kmalloc+0x4a/0xd0 [ 2363.610464][T14533] tomoyo_encode2.part.0+0xe9/0x3a0 [ 2363.615688][T14533] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2363.621308][T14533] tomoyo_encode+0x2c/0x50 [ 2363.625764][T14533] tomoyo_realpath_from_path+0x185/0x600 [ 2363.631438][T14533] tomoyo_path_number_perm+0x217/0x570 [ 2363.636920][T14533] ? tomoyo_path_number_perm+0x1c1/0x570 [ 2363.642576][T14533] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2363.648433][T14533] ? wait_for_completion_io_timeout+0x20/0x20 [ 2363.654558][T14533] ? __fget_files+0x26a/0x480 [ 2363.659283][T14533] security_file_ioctl+0x54/0xb0 [ 2363.664260][T14533] __x64_sys_ioctl+0xb7/0x210 [ 2363.669005][T14533] do_syscall_64+0x39/0xb0 [ 2363.673454][T14533] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2363.679403][T14533] RIP: 0033:0x7f1097e8c0f9 [ 2363.683844][T14533] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2363.703468][T14533] RSP: 002b:00007f1098bfd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2363.711903][T14533] RAX: ffffffffffffffda RBX: 00007f1097fabf80 RCX: 00007f1097e8c0f9 [ 2363.719898][T14533] RDX: 00000000200002c0 RSI: 0000000000002275 RDI: 0000000000000003 [ 2363.727883][T14533] RBP: 00007f1098bfd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2363.735887][T14533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2363.743892][T14533] R13: 00007f10980cfb1f R14: 00007f1098bfd300 R15: 0000000000022000 [ 2363.751944][T14533] 15:30:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0xfdfdffff, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 4) 15:30:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0}) 15:30:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x600, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xfffffffb, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:12 executing program 5: mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2000, 0x103) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) [ 2363.790917][T14533] ERROR: Out of memory at tomoyo_realpath_from_path. 15:30:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0}) 15:30:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x700, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:12 executing program 5: mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2000, 0x103) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) 15:30:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x0, 0xa, &(0x7f0000001540)=""/10}, &(0x7f0000000180)="a4f33c451634", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2363.957401][T14563] ------------[ cut here ]------------ [ 2363.963112][T14563] WARNING: CPU: 1 PID: 14563 at lib/iov_iter.c:623 _copy_from_iter+0x2ad/0x1060 [ 2363.972211][T14563] Modules linked in: [ 2363.976368][T14563] CPU: 1 PID: 14563 Comm: syz-executor.0 Not tainted 6.2.0-syzkaller-12765-g982818426a0f #0 [ 2363.986843][T14563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2363.997112][T14563] RIP: 0010:_copy_from_iter+0x2ad/0x1060 15:30:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0xfdfdffff, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xff00, 0x0, 0x0}) [ 2364.002864][T14563] Code: 5d 41 5c 41 5d 41 5e 41 5f c3 e8 ce 79 69 fd be 73 02 00 00 48 c7 c7 c0 c0 a6 8a e8 0d 08 a6 fd e9 56 fe ff ff e8 b3 79 69 fd <0f> 0b 45 31 ff eb 8b e8 a7 79 69 fd 31 ff 89 ee e8 ae 75 69 fd 40 [ 2364.023423][T14563] RSP: 0018:ffffc9000c19f688 EFLAGS: 00010212 [ 2364.029561][T14563] RAX: 0000000000000824 RBX: 0000000000000000 RCX: ffffc90003d01000 [ 2364.037930][T14563] RDX: 0000000000040000 RSI: ffffffff841b885d RDI: 0000000000000001 [ 2364.046025][T14563] RBP: 000000000000000a R08: 0000000000000001 R09: 0000000000000000 [ 2364.054106][T14563] R10: 0000000000000000 R11: 0000000000094001 R12: 0000000000000000 [ 2364.062132][T14563] R13: ffffea0000a6da00 R14: ffffc9000c19f8c0 R15: 000000000000000a [ 2364.070534][T14563] FS: 00007f9e3163b700(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 2364.079577][T14563] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2364.086275][T14563] CR2: 00007fd93890e265 CR3: 000000002a10c000 CR4: 00000000003506e0 [ 2364.094355][T14563] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 15:30:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:30:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0}) [ 2364.102369][T14563] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2364.110515][T14563] Call Trace: [ 2364.113903][T14563] [ 2364.116904][T14563] ? __lock_acquire+0x18bc/0x5d40 [ 2364.121997][T14563] ? iov_iter_get_pages_alloc2+0xf0/0xf0 [ 2364.127951][T14563] ? bio_add_pc_page+0xbc/0x100 [ 2364.133048][T14563] copy_page_from_iter+0x233/0x3f0 [ 2364.138260][T14563] blk_rq_map_user_iov+0xb5d/0x16e0 [ 2364.143705][T14563] ? find_held_lock+0x2d/0x110 [ 2364.148523][T14563] ? bio_map_user_iov+0x8a0/0x8a0 15:30:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2, &(0x7f00000002c0)={0xfdfdffff, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2364.153692][T14563] ? sg_common_write.constprop.0+0xc89/0x1e00 [ 2364.159826][T14563] ? trace_contention_end+0x173/0x1e0 [ 2364.165437][T14563] ? __mutex_lock+0x231/0x1350 [ 2364.170280][T14563] blk_rq_map_user_io+0x1cd/0x200 [ 2364.175541][T14563] ? blk_rq_map_user_io.part.0+0x270/0x270 [ 2364.181418][T14563] ? wait_for_completion_io_timeout+0x20/0x20 [ 2364.187668][T14563] sg_common_write.constprop.0+0xdcd/0x1e00 [ 2364.193695][T14563] ? sg_read+0x1520/0x1520 [ 2364.198164][T14563] ? __sanitizer_cov_trace_switch+0x54/0x90 15:30:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2364.204359][T14563] ? scsi_cmd_allowed.part.0.isra.0+0x58/0x140 [ 2364.210599][T14563] sg_new_write.isra.0+0x522/0xa90 [ 2364.215923][T14563] ? sg_common_write.constprop.0+0x1e00/0x1e00 [ 2364.222167][T14563] ? scsi_block_when_processing_errors+0x298/0x350 [ 2364.228825][T14563] ? scsi_check_sense+0x1130/0x1130 [ 2364.234157][T14563] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2364.240128][T14563] ? do_vfs_ioctl+0x132/0x1670 [ 2364.245044][T14563] sg_ioctl+0x9a8/0x2700 [ 2364.249360][T14563] ? sg_write+0xe0/0xe0 [ 2364.253771][T14563] ? xfd_validate_state+0x5d/0x180 15:30:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0}) 15:30:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x10, &(0x7f00000002c0)={0xfdfdffff, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2364.258995][T14563] ? __fget_files+0x26a/0x480 [ 2364.263900][T14563] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2364.268901][T14563] ? sg_write+0xe0/0xe0 [ 2364.273200][T14563] __x64_sys_ioctl+0x197/0x210 [ 2364.278035][T14563] do_syscall_64+0x39/0xb0 [ 2364.282514][T14563] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2364.288746][T14563] RIP: 0033:0x7f9e3088c0f9 [ 2364.293266][T14563] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2364.313108][T14563] RSP: 002b:00007f9e3163b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2364.321657][T14563] RAX: ffffffffffffffda RBX: 00007f9e309abf80 RCX: 00007f9e3088c0f9 [ 2364.329954][T14563] RDX: 0000000020000080 RSI: 0000000000002285 RDI: 0000000000000003 [ 2364.338040][T14563] RBP: 00007f9e308e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2364.346130][T14563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2364.354200][T14563] R13: 00007f9e30acfb1f R14: 00007f9e3163b300 R15: 0000000000022000 [ 2364.362239][T14563] [ 2364.365366][T14563] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2364.372680][T14563] CPU: 1 PID: 14563 Comm: syz-executor.0 Not tainted 6.2.0-syzkaller-12765-g982818426a0f #0 [ 2364.382763][T14563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2364.392866][T14563] Call Trace: [ 2364.396157][T14563] [ 2364.399184][T14563] dump_stack_lvl+0xd9/0x150 [ 2364.403810][T14563] panic+0x61b/0x6c0 [ 2364.408968][T14563] ? panic_smp_self_stop+0x90/0x90 [ 2364.414102][T14563] ? show_trace_log_lvl+0x285/0x390 [ 2364.419552][T14563] ? _copy_from_iter+0x2ad/0x1060 [ 2364.424623][T14563] check_panic_on_warn+0xb1/0xc0 [ 2364.429628][T14563] __warn+0xf2/0x4f0 [ 2364.433576][T14563] ? _copy_from_iter+0x2ad/0x1060 [ 2364.438774][T14563] report_bug+0x2da/0x500 [ 2364.443134][T14563] handle_bug+0x3c/0x70 [ 2364.447310][T14563] exc_invalid_op+0x18/0x50 [ 2364.451835][T14563] asm_exc_invalid_op+0x1a/0x20 [ 2364.456733][T14563] RIP: 0010:_copy_from_iter+0x2ad/0x1060 [ 2364.462384][T14563] Code: 5d 41 5c 41 5d 41 5e 41 5f c3 e8 ce 79 69 fd be 73 02 00 00 48 c7 c7 c0 c0 a6 8a e8 0d 08 a6 fd e9 56 fe ff ff e8 b3 79 69 fd <0f> 0b 45 31 ff eb 8b e8 a7 79 69 fd 31 ff 89 ee e8 ae 75 69 fd 40 [ 2364.482018][T14563] RSP: 0018:ffffc9000c19f688 EFLAGS: 00010212 [ 2364.488111][T14563] RAX: 0000000000000824 RBX: 0000000000000000 RCX: ffffc90003d01000 [ 2364.496115][T14563] RDX: 0000000000040000 RSI: ffffffff841b885d RDI: 0000000000000001 [ 2364.504094][T14563] RBP: 000000000000000a R08: 0000000000000001 R09: 0000000000000000 [ 2364.512078][T14563] R10: 0000000000000000 R11: 0000000000094001 R12: 0000000000000000 [ 2364.520148][T14563] R13: ffffea0000a6da00 R14: ffffc9000c19f8c0 R15: 000000000000000a [ 2364.528147][T14563] ? _copy_from_iter+0x2ad/0x1060 [ 2364.533199][T14563] ? _copy_from_iter+0x2ad/0x1060 [ 2364.538266][T14563] ? __lock_acquire+0x18bc/0x5d40 [ 2364.543337][T14563] ? iov_iter_get_pages_alloc2+0xf0/0xf0 [ 2364.549021][T14563] ? bio_add_pc_page+0xbc/0x100 [ 2364.553910][T14563] copy_page_from_iter+0x233/0x3f0 [ 2364.559050][T14563] blk_rq_map_user_iov+0xb5d/0x16e0 [ 2364.564286][T14563] ? find_held_lock+0x2d/0x110 [ 2364.569063][T14563] ? bio_map_user_iov+0x8a0/0x8a0 [ 2364.574110][T14563] ? sg_common_write.constprop.0+0xc89/0x1e00 [ 2364.580249][T14563] ? trace_contention_end+0x173/0x1e0 [ 2364.585838][T14563] ? __mutex_lock+0x231/0x1350 [ 2364.590777][T14563] blk_rq_map_user_io+0x1cd/0x200 [ 2364.595836][T14563] ? blk_rq_map_user_io.part.0+0x270/0x270 [ 2364.601668][T14563] ? wait_for_completion_io_timeout+0x20/0x20 [ 2364.607796][T14563] sg_common_write.constprop.0+0xdcd/0x1e00 [ 2364.613961][T14563] ? sg_read+0x1520/0x1520 [ 2364.618425][T14563] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2364.624350][T14563] ? scsi_cmd_allowed.part.0.isra.0+0x58/0x140 [ 2364.630538][T14563] sg_new_write.isra.0+0x522/0xa90 [ 2364.635680][T14563] ? sg_common_write.constprop.0+0x1e00/0x1e00 [ 2364.641873][T14563] ? scsi_block_when_processing_errors+0x298/0x350 [ 2364.648404][T14563] ? scsi_check_sense+0x1130/0x1130 [ 2364.653642][T14563] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2364.659578][T14563] ? do_vfs_ioctl+0x132/0x1670 [ 2364.664372][T14563] sg_ioctl+0x9a8/0x2700 [ 2364.668650][T14563] ? sg_write+0xe0/0xe0 [ 2364.672834][T14563] ? xfd_validate_state+0x5d/0x180 [ 2364.677972][T14563] ? __fget_files+0x26a/0x480 [ 2364.682674][T14563] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2364.687654][T14563] ? sg_write+0xe0/0xe0 [ 2364.691841][T14563] __x64_sys_ioctl+0x197/0x210 [ 2364.696643][T14563] do_syscall_64+0x39/0xb0 [ 2364.701085][T14563] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2364.707029][T14563] RIP: 0033:0x7f9e3088c0f9 [ 2364.711474][T14563] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2364.731102][T14563] RSP: 002b:00007f9e3163b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2364.739536][T14563] RAX: ffffffffffffffda RBX: 00007f9e309abf80 RCX: 00007f9e3088c0f9 [ 2364.747522][T14563] RDX: 0000000020000080 RSI: 0000000000002285 RDI: 0000000000000003 [ 2364.755527][T14563] RBP: 00007f9e308e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2364.763523][T14563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2364.771644][T14563] R13: 00007f9e30acfb1f R14: 00007f9e3163b300 R15: 0000000000022000 [ 2364.779656][T14563] [ 2364.783082][T14563] Kernel Offset: disabled [ 2364.787418][T14563] Rebooting in 86400 seconds..