_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000a40)={&(0x7f0000000540), 0xc, &(0x7f0000000a00)={&(0x7f00000005c0)={0x200, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d1b004dc62aa6bf576fbe544ad25e160472f47cb717df38202"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "fa0342f0cca6757279f9c51e5238a0224f25850819a8"}}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "182ad4b363118e78c1b2b34bd8bbe44a7de9b83f1b3715747b98a3e14093682db013244986e0bc5912fb5779a6def90b31a910c42bc95e28fe1f4cb9475b5569eaa830da8baa3b79a1fc526d470893207bca7e8b2e432e97107a8b563c0c4bb20298a928a2b3e1510e7de101345466e1b0dc827eccd0962f30c7c6431733beeb0ee85383208da3a1cfc54d50d841e4cf643e5cb5aa08db89101a0c7cbf22c90e772115f06013074915383d5a940871bbec0a17f6c1ab7d1c28424c2806acc7061dde53ebd69f36c0aa8a81f2fe7e3717d6a8d9261a743d9fc80dd0bda8ed3f7d399e75875cc509aa4e61"}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x200}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f0000000d00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x480c0080}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x1bc, 0x0, 0x0, 0x0, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}]}, 0x1bc}}, 0x0) syz_io_uring_setup(0x686f, &(0x7f0000000d40)={0x0, 0x7c2f, 0x10, 0x0, 0x81, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:33 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x150, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:33 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="440b779022c97579722b14d739600903781c9e84b79385e754e8ea30c6c4031b4eb354d7b4df5449b42cd52065d5426adaaad0924c7a37b9456bc38953b32e884c9aa0d0"], 0x13, 0x0) 03:24:33 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000a40)={&(0x7f0000000540), 0xc, &(0x7f0000000a00)={&(0x7f00000005c0)={0x200, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d1b004dc62aa6bf576fbe544ad25e160472f47cb717df38202"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "fa0342f0cca6757279f9c51e5238a0224f25850819a8"}}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "182ad4b363118e78c1b2b34bd8bbe44a7de9b83f1b3715747b98a3e14093682db013244986e0bc5912fb5779a6def90b31a910c42bc95e28fe1f4cb9475b5569eaa830da8baa3b79a1fc526d470893207bca7e8b2e432e97107a8b563c0c4bb20298a928a2b3e1510e7de101345466e1b0dc827eccd0962f30c7c6431733beeb0ee85383208da3a1cfc54d50d841e4cf643e5cb5aa08db89101a0c7cbf22c90e772115f06013074915383d5a940871bbec0a17f6c1ab7d1c28424c2806acc7061dde53ebd69f36c0aa8a81f2fe7e3717d6a8d9261a743d9fc80dd0bda8ed3f7d399e75875cc509aa4e61"}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x200}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000d00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x480c0080}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x1bc, 0x0, 0x0, 0x0, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}]}, 0x1bc}}, 0x0) syz_io_uring_setup(0x686f, &(0x7f0000000d40)={0x0, 0x7c2f, 0x10, 0x0, 0x81, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) 03:24:33 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x5c683) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x3, 0x1, 0x20000000, 0x1, 0xff}, 0x0, 0xfffffffffffffffd}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x80800) 03:24:33 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) r1 = io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) syz_io_uring_setup(0x686f, &(0x7f0000000d40)={0x0, 0x7c2f, 0x10, 0x0, 0x81, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:33 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) r1 = io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000a40)={&(0x7f0000000540), 0xc, &(0x7f0000000a00)={&(0x7f00000005c0)={0x200, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d1b004dc62aa6bf576fbe544ad25e160472f47cb717df38202"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "fa0342f0cca6757279f9c51e5238a0224f25850819a8"}}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "182ad4b363118e78c1b2b34bd8bbe44a7de9b83f1b3715747b98a3e14093682db013244986e0bc5912fb5779a6def90b31a910c42bc95e28fe1f4cb9475b5569eaa830da8baa3b79a1fc526d470893207bca7e8b2e432e97107a8b563c0c4bb20298a928a2b3e1510e7de101345466e1b0dc827eccd0962f30c7c6431733beeb0ee85383208da3a1cfc54d50d841e4cf643e5cb5aa08db89101a0c7cbf22c90e772115f06013074915383d5a940871bbec0a17f6c1ab7d1c28424c2806acc7061dde53ebd69f36c0aa8a81f2fe7e3717d6a8d9261a743d9fc80dd0bda8ed3f7d399e75875cc509aa4e61"}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x200}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f0000000d00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x480c0080}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x1bc, 0x0, 0x0, 0x0, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}]}, 0x1bc}}, 0x0) syz_io_uring_setup(0x686f, &(0x7f0000000d40)={0x0, 0x7c2f, 0x10, 0x0, 0x81, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:33 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x150, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:33 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="440b779022c97579722b14d739600903781c9e84b79385e754e8ea30c6c4031b4eb354d7b4df5449b42cd52065d5426adaaad0924c7a37b9456bc38953b32e884c9aa0d0"], 0x13, 0x0) 03:24:33 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x5c683) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x80800) 03:24:33 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000a40)={&(0x7f0000000540), 0xc, &(0x7f0000000a00)={&(0x7f00000005c0)={0x200, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d1b004dc62aa6bf576fbe544ad25e160472f47cb717df38202"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "fa0342f0cca6757279f9c51e5238a0224f25850819a8"}}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "182ad4b363118e78c1b2b34bd8bbe44a7de9b83f1b3715747b98a3e14093682db013244986e0bc5912fb5779a6def90b31a910c42bc95e28fe1f4cb9475b5569eaa830da8baa3b79a1fc526d470893207bca7e8b2e432e97107a8b563c0c4bb20298a928a2b3e1510e7de101345466e1b0dc827eccd0962f30c7c6431733beeb0ee85383208da3a1cfc54d50d841e4cf643e5cb5aa08db89101a0c7cbf22c90e772115f06013074915383d5a940871bbec0a17f6c1ab7d1c28424c2806acc7061dde53ebd69f36c0aa8a81f2fe7e3717d6a8d9261a743d9fc80dd0bda8ed3f7d399e75875cc509aa4e61"}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x200}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000d00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x480c0080}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x1bc, 0x0, 0x0, 0x0, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}]}, 0x1bc}}, 0x0) 03:24:33 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) r1 = io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) syz_io_uring_setup(0x686f, &(0x7f0000000d40)={0x0, 0x7c2f, 0x10, 0x0, 0x81, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:33 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x150, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:33 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), 0x0, 0x13, 0x0) 03:24:33 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000a40)={&(0x7f0000000540), 0xc, &(0x7f0000000a00)={&(0x7f00000005c0)={0x200, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d1b004dc62aa6bf576fbe544ad25e160472f47cb717df38202"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "fa0342f0cca6757279f9c51e5238a0224f25850819a8"}}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "182ad4b363118e78c1b2b34bd8bbe44a7de9b83f1b3715747b98a3e14093682db013244986e0bc5912fb5779a6def90b31a910c42bc95e28fe1f4cb9475b5569eaa830da8baa3b79a1fc526d470893207bca7e8b2e432e97107a8b563c0c4bb20298a928a2b3e1510e7de101345466e1b0dc827eccd0962f30c7c6431733beeb0ee85383208da3a1cfc54d50d841e4cf643e5cb5aa08db89101a0c7cbf22c90e772115f06013074915383d5a940871bbec0a17f6c1ab7d1c28424c2806acc7061dde53ebd69f36c0aa8a81f2fe7e3717d6a8d9261a743d9fc80dd0bda8ed3f7d399e75875cc509aa4e61"}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x200}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000d00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x480c0080}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x1bc, 0x0, 0x0, 0x0, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}]}, 0x1bc}}, 0x0) syz_io_uring_setup(0x686f, &(0x7f0000000d40)={0x0, 0x7c2f, 0x10, 0x0, 0x81, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) 03:24:33 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000a40)={&(0x7f0000000540), 0xc, &(0x7f0000000a00)={&(0x7f00000005c0)={0x200, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d1b004dc62aa6bf576fbe544ad25e160472f47cb717df38202"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "fa0342f0cca6757279f9c51e5238a0224f25850819a8"}}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "182ad4b363118e78c1b2b34bd8bbe44a7de9b83f1b3715747b98a3e14093682db013244986e0bc5912fb5779a6def90b31a910c42bc95e28fe1f4cb9475b5569eaa830da8baa3b79a1fc526d470893207bca7e8b2e432e97107a8b563c0c4bb20298a928a2b3e1510e7de101345466e1b0dc827eccd0962f30c7c6431733beeb0ee85383208da3a1cfc54d50d841e4cf643e5cb5aa08db89101a0c7cbf22c90e772115f06013074915383d5a940871bbec0a17f6c1ab7d1c28424c2806acc7061dde53ebd69f36c0aa8a81f2fe7e3717d6a8d9261a743d9fc80dd0bda8ed3f7d399e75875cc509aa4e61"}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x200}}, 0x0) 03:24:33 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x80800) 03:24:33 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) r1 = io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) syz_io_uring_setup(0x686f, &(0x7f0000000d40)={0x0, 0x7c2f, 0x10, 0x0, 0x81, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:33 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0xf4, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:33 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x80800) 03:24:33 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), 0x0, 0x13, 0x0) 03:24:33 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000a40)={&(0x7f0000000540), 0xc, &(0x7f0000000a00)={&(0x7f00000005c0)={0x200, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d1b004dc62aa6bf576fbe544ad25e160472f47cb717df38202"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "fa0342f0cca6757279f9c51e5238a0224f25850819a8"}}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "182ad4b363118e78c1b2b34bd8bbe44a7de9b83f1b3715747b98a3e14093682db013244986e0bc5912fb5779a6def90b31a910c42bc95e28fe1f4cb9475b5569eaa830da8baa3b79a1fc526d470893207bca7e8b2e432e97107a8b563c0c4bb20298a928a2b3e1510e7de101345466e1b0dc827eccd0962f30c7c6431733beeb0ee85383208da3a1cfc54d50d841e4cf643e5cb5aa08db89101a0c7cbf22c90e772115f06013074915383d5a940871bbec0a17f6c1ab7d1c28424c2806acc7061dde53ebd69f36c0aa8a81f2fe7e3717d6a8d9261a743d9fc80dd0bda8ed3f7d399e75875cc509aa4e61"}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x200}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000d00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x480c0080}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x1bc, 0x0, 0x0, 0x0, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}]}, 0x1bc}}, 0x0) 03:24:33 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) 03:24:33 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0xf4, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:33 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) r1 = io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) syz_io_uring_setup(0x686f, &(0x7f0000000d40)={0x0, 0x7c2f, 0x10, 0x0, 0x81}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:33 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x80800) 03:24:33 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), 0x0, 0x13, 0x0) 03:24:33 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000a40)={&(0x7f0000000540), 0xc, &(0x7f0000000a00)={&(0x7f00000005c0)={0x200, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d1b004dc62aa6bf576fbe544ad25e160472f47cb717df38202"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "fa0342f0cca6757279f9c51e5238a0224f25850819a8"}}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "182ad4b363118e78c1b2b34bd8bbe44a7de9b83f1b3715747b98a3e14093682db013244986e0bc5912fb5779a6def90b31a910c42bc95e28fe1f4cb9475b5569eaa830da8baa3b79a1fc526d470893207bca7e8b2e432e97107a8b563c0c4bb20298a928a2b3e1510e7de101345466e1b0dc827eccd0962f30c7c6431733beeb0ee85383208da3a1cfc54d50d841e4cf643e5cb5aa08db89101a0c7cbf22c90e772115f06013074915383d5a940871bbec0a17f6c1ab7d1c28424c2806acc7061dde53ebd69f36c0aa8a81f2fe7e3717d6a8d9261a743d9fc80dd0bda8ed3f7d399e75875cc509aa4e61"}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x200}}, 0x0) 03:24:33 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) 03:24:34 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x80800) 03:24:34 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000100)=ANY=[], 0x13, 0x0) 03:24:34 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) 03:24:34 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0xf4, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:34 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) r1 = io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) syz_io_uring_setup(0x686f, &(0x7f0000000d40)={0x0, 0x7c2f, 0x10, 0x0, 0x81}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:34 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) 03:24:34 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x148, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:34 executing program 2: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x80800) 03:24:34 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000100)=ANY=[], 0x13, 0x0) 03:24:34 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) 03:24:34 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) 03:24:34 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) r1 = io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) syz_io_uring_setup(0x686f, &(0x7f0000000d40)={0x0, 0x7c2f, 0x10, 0x0, 0x81}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:34 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x148, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:34 executing program 2: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x80800) 03:24:34 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) 03:24:34 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000100)=ANY=[], 0x13, 0x0) 03:24:34 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) 03:24:34 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) r1 = io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_setup(0x686f, &(0x7f0000000d40)={0x0, 0x7c2f, 0x10, 0x0, 0x81}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:34 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x148, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:34 executing program 2: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x80800) 03:24:34 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) 03:24:34 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000100)=ANY=[@ANYBLOB], 0x13, 0x0) 03:24:34 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) 03:24:34 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x150, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:34 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) accept4$packet(r0, 0x0, &(0x7f0000000040), 0x80800) 03:24:34 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) 03:24:34 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) r1 = io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_io_uring_setup(0x686f, &(0x7f0000000d40)={0x0, 0x7c2f, 0x10, 0x0, 0x81}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:34 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000100)=ANY=[@ANYBLOB], 0x13, 0x0) 03:24:34 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 03:24:35 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x150, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:35 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0x80800) 03:24:35 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) 03:24:35 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000100)=ANY=[@ANYBLOB], 0x13, 0x0) 03:24:35 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) syz_io_uring_setup(0x686f, &(0x7f0000000d40)={0x0, 0x7c2f, 0x10, 0x0, 0x81}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:35 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) 03:24:35 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x150, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:35 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) 03:24:35 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 03:24:35 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) syz_io_uring_setup(0x686f, &(0x7f0000000d40)={0x0, 0x7c2f, 0x10, 0x0, 0x81}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:35 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000100)=ANY=[@ANYBLOB="440b779022c97579722b14d739600903781c9e84b79385e754e8ea30c6c4031b4eb3"], 0x13, 0x0) 03:24:35 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x148, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:35 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) 03:24:35 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) r1 = io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_setup(0x686f, &(0x7f0000000d40)={0x0, 0x7c2f, 0x10, 0x0, 0x81}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:35 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) 03:24:35 executing program 3: syz_io_uring_setup(0x686f, &(0x7f0000000d40)={0x0, 0x7c2f, 0x10, 0x0, 0x81}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:35 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x148, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:35 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000100)=ANY=[@ANYBLOB], 0x13, 0x0) 03:24:35 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) 03:24:35 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) 03:24:35 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000d40)={0x0, 0x7c2f, 0x10, 0x0, 0x81}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:35 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) r1 = io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) syz_io_uring_setup(0x686f, &(0x7f0000000d40)={0x0, 0x7c2f, 0x10, 0x0, 0x81}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:35 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000100)=ANY=[@ANYBLOB], 0x13, 0x0) 03:24:35 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x148, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:35 executing program 5: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2) 03:24:35 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000d40)={0x0, 0x7c2f, 0x10, 0x0, 0x81}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:35 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) 03:24:35 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) 03:24:35 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000100)=ANY=[@ANYBLOB], 0x13, 0x0) 03:24:35 executing program 5: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2) 03:24:35 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x150, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:36 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000d40)={0x0, 0x7c2f, 0x10, 0x0, 0x81}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:36 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000100)=ANY=[@ANYBLOB="440b779022c97579722b14d73960090378"], 0x13, 0x0) 03:24:36 executing program 1: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2) 03:24:36 executing program 2: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0xf4, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:36 executing program 5: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2) 03:24:36 executing program 3: syz_io_uring_setup(0x686f, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:36 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x150, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:36 executing program 1: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2) 03:24:36 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000100)=ANY=[@ANYBLOB], 0x13, 0x0) 03:24:36 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) 03:24:36 executing program 2: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0xf4, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:36 executing program 3: syz_io_uring_setup(0x686f, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:36 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x150, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:36 executing program 1: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2) 03:24:36 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000100)=ANY=[@ANYBLOB], 0x13, 0x0) 03:24:36 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) 03:24:36 executing program 2: syz_io_uring_setup(0x686f, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:36 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x148, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:36 executing program 3: syz_io_uring_setup(0x686f, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:36 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) 03:24:36 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000100)=ANY=[@ANYBLOB], 0x13, 0x0) 03:24:36 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) 03:24:36 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000a40)={&(0x7f0000000540), 0xc, &(0x7f0000000a00)={&(0x7f00000005c0)={0x200, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d1b004dc62aa6bf576fbe544ad25e160472f47cb717df38202"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "fa0342f0cca6757279f9c51e5238a0224f25850819a8"}}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "182ad4b363118e78c1b2b34bd8bbe44a7de9b83f1b3715747b98a3e14093682db013244986e0bc5912fb5779a6def90b31a910c42bc95e28fe1f4cb9475b5569eaa830da8baa3b79a1fc526d470893207bca7e8b2e432e97107a8b563c0c4bb20298a928a2b3e1510e7de101345466e1b0dc827eccd0962f30c7c6431733beeb0ee85383208da3a1cfc54d50d841e4cf643e5cb5aa08db89101a0c7cbf22c90e772115f06013074915383d5a940871bbec0a17f6c1ab7d1c28424c2806acc7061dde53ebd69f36c0aa8a81f2fe7e3717d6a8d9261a743d9fc80dd0bda8ed3f7d399e75875cc509aa4e61"}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x200}}, 0x0) 03:24:36 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) 03:24:36 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x148, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:36 executing program 3: syz_io_uring_setup(0x686f, &(0x7f0000000d40)={0x0, 0x0, 0x10, 0x0, 0x81}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:36 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000100)=ANY=[@ANYBLOB="440b779022c9757972"], 0x13, 0x0) 03:24:36 executing program 5: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x148, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:36 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000a40)={&(0x7f0000000540), 0xc, &(0x7f0000000a00)={&(0x7f00000005c0)={0x200, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d1b004dc62aa6bf576fbe544ad25e160472f47cb717df38202"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "fa0342f0cca6757279f9c51e5238a0224f25850819a8"}}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "182ad4b363118e78c1b2b34bd8bbe44a7de9b83f1b3715747b98a3e14093682db013244986e0bc5912fb5779a6def90b31a910c42bc95e28fe1f4cb9475b5569eaa830da8baa3b79a1fc526d470893207bca7e8b2e432e97107a8b563c0c4bb20298a928a2b3e1510e7de101345466e1b0dc827eccd0962f30c7c6431733beeb0ee85383208da3a1cfc54d50d841e4cf643e5cb5aa08db89101a0c7cbf22c90e772115f06013074915383d5a940871bbec0a17f6c1ab7d1c28424c2806acc7061dde53ebd69f36c0aa8a81f2fe7e3717d6a8d9261a743d9fc80dd0bda8ed3f7d399e75875cc509aa4e61"}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x200}}, 0x0) 03:24:36 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) 03:24:37 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000100)=ANY=[@ANYBLOB='D'], 0x13, 0x0) 03:24:37 executing program 3: syz_io_uring_setup(0x686f, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x81}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:37 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x148, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:37 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) 03:24:37 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000a40)={&(0x7f0000000540), 0xc, &(0x7f0000000a00)={&(0x7f00000005c0)={0x200, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d1b004dc62aa6bf576fbe544ad25e160472f47cb717df38202"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "fa0342f0cca6757279f9c51e5238a0224f25850819a8"}}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "182ad4b363118e78c1b2b34bd8bbe44a7de9b83f1b3715747b98a3e14093682db013244986e0bc5912fb5779a6def90b31a910c42bc95e28fe1f4cb9475b5569eaa830da8baa3b79a1fc526d470893207bca7e8b2e432e97107a8b563c0c4bb20298a928a2b3e1510e7de101345466e1b0dc827eccd0962f30c7c6431733beeb0ee85383208da3a1cfc54d50d841e4cf643e5cb5aa08db89101a0c7cbf22c90e772115f06013074915383d5a940871bbec0a17f6c1ab7d1c28424c2806acc7061dde53ebd69f36c0aa8a81f2fe7e3717d6a8d9261a743d9fc80dd0bda8ed3f7d399e75875cc509aa4e61"}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x200}}, 0x0) 03:24:37 executing program 1: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0xf4, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:37 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000100)=ANY=[@ANYBLOB], 0x13, 0x0) 03:24:37 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x150, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:37 executing program 3: syz_io_uring_setup(0x686f, &(0x7f0000000d40), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:37 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) 03:24:37 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000a40)={&(0x7f0000000540), 0xc, &(0x7f0000000a00)={&(0x7f00000005c0)={0x200, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d1b004dc62aa6bf576fbe544ad25e160472f47cb717df38202"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "fa0342f0cca6757279f9c51e5238a0224f25850819a8"}}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "182ad4b363118e78c1b2b34bd8bbe44a7de9b83f1b3715747b98a3e14093682db013244986e0bc5912fb5779a6def90b31a910c42bc95e28fe1f4cb9475b5569eaa830da8baa3b79a1fc526d470893207bca7e8b2e432e97107a8b563c0c4bb20298a928a2b3e1510e7de101345466e1b0dc827eccd0962f30c7c6431733beeb0ee85383208da3a1cfc54d50d841e4cf643e5cb5aa08db89101a0c7cbf22c90e772115f06013074915383d5a940871bbec0a17f6c1ab7d1c28424c2806acc7061dde53ebd69f36c0aa8a81f2fe7e3717d6a8d9261a743d9fc80dd0bda8ed3f7d399e75875cc509aa4e61"}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x200}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000d00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x480c0080}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x1bc, 0x0, 0x0, 0x0, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}]}, 0x1bc}}, 0x0) syz_io_uring_setup(0x686f, &(0x7f0000000d40)={0x0, 0x7c2f, 0x10, 0x0, 0x81, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) 03:24:37 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000100)=ANY=[@ANYBLOB], 0x13, 0x0) 03:24:37 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) 03:24:37 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x150, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:37 executing program 3: syz_io_uring_setup(0x686f, &(0x7f0000000d40), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000e00)) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:37 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) 03:24:37 executing program 1: syz_io_uring_setup(0x686f, &(0x7f0000000d40), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:37 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x150, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:37 executing program 3: syz_io_uring_setup(0x686f, &(0x7f0000000d40), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:37 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000100)=ANY=[@ANYBLOB], 0x13, 0x0) 03:24:37 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) 03:24:37 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) 03:24:37 executing program 1: syz_io_uring_setup(0x686f, &(0x7f0000000d40), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:37 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x5c683) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x80800) 03:24:37 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x148, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:37 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) 03:24:37 executing program 3: syz_io_uring_setup(0x686f, &(0x7f0000000d40), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:37 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) 03:24:37 executing program 1: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x150, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:38 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) r1 = io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000a40)={&(0x7f0000000540), 0xc, &(0x7f0000000a00)={&(0x7f00000005c0)={0x200, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d1b004dc62aa6bf576fbe544ad25e160472f47cb717df38202"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "fa0342f0cca6757279f9c51e5238a0224f25850819a8"}}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "182ad4b363118e78c1b2b34bd8bbe44a7de9b83f1b3715747b98a3e14093682db013244986e0bc5912fb5779a6def90b31a910c42bc95e28fe1f4cb9475b5569eaa830da8baa3b79a1fc526d470893207bca7e8b2e432e97107a8b563c0c4bb20298a928a2b3e1510e7de101345466e1b0dc827eccd0962f30c7c6431733beeb0ee85383208da3a1cfc54d50d841e4cf643e5cb5aa08db89101a0c7cbf22c90e772115f06013074915383d5a940871bbec0a17f6c1ab7d1c28424c2806acc7061dde53ebd69f36c0aa8a81f2fe7e3717d6a8d9261a743d9fc80dd0bda8ed3f7d399e75875cc509aa4e61"}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x200}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f0000000d00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x480c0080}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x1bc, 0x0, 0x0, 0x0, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}]}, 0x1bc}}, 0x0) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:38 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x148, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:38 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) 03:24:38 executing program 3: syz_io_uring_setup(0x686f, &(0x7f0000000d40), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:38 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) r1 = io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000a40)={&(0x7f0000000540), 0xc, &(0x7f0000000a00)={&(0x7f00000005c0)={0x200, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d1b004dc62aa6bf576fbe544ad25e160472f47cb717df38202"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "fa0342f0cca6757279f9c51e5238a0224f25850819a8"}}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "182ad4b363118e78c1b2b34bd8bbe44a7de9b83f1b3715747b98a3e14093682db013244986e0bc5912fb5779a6def90b31a910c42bc95e28fe1f4cb9475b5569eaa830da8baa3b79a1fc526d470893207bca7e8b2e432e97107a8b563c0c4bb20298a928a2b3e1510e7de101345466e1b0dc827eccd0962f30c7c6431733beeb0ee85383208da3a1cfc54d50d841e4cf643e5cb5aa08db89101a0c7cbf22c90e772115f06013074915383d5a940871bbec0a17f6c1ab7d1c28424c2806acc7061dde53ebd69f36c0aa8a81f2fe7e3717d6a8d9261a743d9fc80dd0bda8ed3f7d399e75875cc509aa4e61"}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x200}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f0000000d00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x480c0080}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x1bc, 0x0, 0x0, 0x0, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}]}, 0x1bc}}, 0x0) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:38 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) 03:24:38 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) 03:24:38 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x148, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:38 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) 03:24:38 executing program 3: syz_io_uring_setup(0x686f, &(0x7f0000000d40), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:38 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) 03:24:38 executing program 4: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x148, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:38 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) r1 = io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000a40)={&(0x7f0000000540), 0xc, &(0x7f0000000a00)={&(0x7f00000005c0)={0x200, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d1b004dc62aa6bf576fbe544ad25e160472f47cb717df38202"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "fa0342f0cca6757279f9c51e5238a0224f25850819a8"}}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "182ad4b363118e78c1b2b34bd8bbe44a7de9b83f1b3715747b98a3e14093682db013244986e0bc5912fb5779a6def90b31a910c42bc95e28fe1f4cb9475b5569eaa830da8baa3b79a1fc526d470893207bca7e8b2e432e97107a8b563c0c4bb20298a928a2b3e1510e7de101345466e1b0dc827eccd0962f30c7c6431733beeb0ee85383208da3a1cfc54d50d841e4cf643e5cb5aa08db89101a0c7cbf22c90e772115f06013074915383d5a940871bbec0a17f6c1ab7d1c28424c2806acc7061dde53ebd69f36c0aa8a81f2fe7e3717d6a8d9261a743d9fc80dd0bda8ed3f7d399e75875cc509aa4e61"}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x200}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f0000000d00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x480c0080}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x1bc, 0x0, 0x0, 0x0, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}]}, 0x1bc}}, 0x0) r4 = syz_io_uring_setup(0x686f, &(0x7f0000000d40)={0x0, 0x7c2f, 0x10, 0x0, 0x81, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0)=0x0, &(0x7f0000000e00)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000f00)=@IORING_OP_WRITE={0x17, 0x0, 0x4004, @fd, 0x0, &(0x7f0000000e40)="751d97940cc9034f5516011bb3592f851c2deff824e60013b07604a9c64b7b4bf16e0a12f154f3bca6689a9a45437a365547d091b7e559d9cec79544f6b37532dcb2e6ca888d92b2799363086095656e23650aa0a94bc41ed20f32c31685222e5f3b9ab0eebafc806eb37641149947004a4b52a244ef3cecfeb3a2d1a1933e4ed7bd032cbd3b0ad11f3d5c19e2d0", 0x8e, 0x0, 0x1}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x68, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x1) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000001180), &(0x7f00000011c0), 0x2, 0x0) syz_io_uring_setup(0x6d90, &(0x7f0000001340)={0x0, 0x7e35, 0x2, 0x1, 0x191, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000013c0), &(0x7f0000001400)) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:38 executing program 3: syz_io_uring_setup(0x686f, &(0x7f0000000d40), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6051, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:38 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) 03:24:38 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x13c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:38 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 03:24:38 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) move_pages(0x0, 0x6, &(0x7f0000000100)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil], 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 03:24:38 executing program 3: syz_io_uring_setup(0x686f, &(0x7f0000000d40), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6051, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:38 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) 03:24:38 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x13c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:38 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) r1 = io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000a40)={&(0x7f0000000540), 0xc, &(0x7f0000000a00)={&(0x7f00000005c0)={0x200, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d1b004dc62aa6bf576fbe544ad25e160472f47cb717df38202"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "fa0342f0cca6757279f9c51e5238a0224f25850819a8"}}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "182ad4b363118e78c1b2b34bd8bbe44a7de9b83f1b3715747b98a3e14093682db013244986e0bc5912fb5779a6def90b31a910c42bc95e28fe1f4cb9475b5569eaa830da8baa3b79a1fc526d470893207bca7e8b2e432e97107a8b563c0c4bb20298a928a2b3e1510e7de101345466e1b0dc827eccd0962f30c7c6431733beeb0ee85383208da3a1cfc54d50d841e4cf643e5cb5aa08db89101a0c7cbf22c90e772115f06013074915383d5a940871bbec0a17f6c1ab7d1c28424c2806acc7061dde53ebd69f36c0aa8a81f2fe7e3717d6a8d9261a743d9fc80dd0bda8ed3f7d399e75875cc509aa4e61"}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x200}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f0000000d00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x480c0080}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x1bc, 0x0, 0x0, 0x0, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}]}, 0x1bc}}, 0x0) r4 = syz_io_uring_setup(0x686f, &(0x7f0000000d40)={0x0, 0x7c2f, 0x10, 0x0, 0x81, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0)=0x0, &(0x7f0000000e00)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000f00)=@IORING_OP_WRITE={0x17, 0x0, 0x4004, @fd, 0x0, &(0x7f0000000e40)="751d97940cc9034f5516011bb3592f851c2deff824e60013b07604a9c64b7b4bf16e0a12f154f3bca6689a9a45437a365547d091b7e559d9cec79544f6b37532dcb2e6ca888d92b2799363086095656e23650aa0a94bc41ed20f32c31685222e5f3b9ab0eebafc806eb37641149947004a4b52a244ef3cecfeb3a2d1a1933e4ed7bd032cbd3b0ad11f3d5c19e2d0", 0x8e, 0x0, 0x1}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x68, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x1) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000001180), &(0x7f00000011c0), 0x2, 0x0) syz_io_uring_setup(0x6d90, &(0x7f0000001340)={0x0, 0x7e35, 0x2, 0x1, 0x191, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000013c0), &(0x7f0000001400)) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:38 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) 03:24:38 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 03:24:38 executing program 3: syz_io_uring_setup(0x686f, &(0x7f0000000d40), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6051, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:38 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) move_pages(0x0, 0x6, &(0x7f0000000100)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil], 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 03:24:38 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x13c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:38 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) 03:24:38 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) r1 = io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000a40)={&(0x7f0000000540), 0xc, &(0x7f0000000a00)={&(0x7f00000005c0)={0x200, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d1b004dc62aa6bf576fbe544ad25e160472f47cb717df38202"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "fa0342f0cca6757279f9c51e5238a0224f25850819a8"}}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "182ad4b363118e78c1b2b34bd8bbe44a7de9b83f1b3715747b98a3e14093682db013244986e0bc5912fb5779a6def90b31a910c42bc95e28fe1f4cb9475b5569eaa830da8baa3b79a1fc526d470893207bca7e8b2e432e97107a8b563c0c4bb20298a928a2b3e1510e7de101345466e1b0dc827eccd0962f30c7c6431733beeb0ee85383208da3a1cfc54d50d841e4cf643e5cb5aa08db89101a0c7cbf22c90e772115f06013074915383d5a940871bbec0a17f6c1ab7d1c28424c2806acc7061dde53ebd69f36c0aa8a81f2fe7e3717d6a8d9261a743d9fc80dd0bda8ed3f7d399e75875cc509aa4e61"}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x200}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f0000000d00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x480c0080}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x1bc, 0x0, 0x0, 0x0, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}]}, 0x1bc}}, 0x0) r4 = syz_io_uring_setup(0x686f, &(0x7f0000000d40)={0x0, 0x7c2f, 0x10, 0x0, 0x81, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0)=0x0, &(0x7f0000000e00)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000f00)=@IORING_OP_WRITE={0x17, 0x0, 0x4004, @fd, 0x0, &(0x7f0000000e40)="751d97940cc9034f5516011bb3592f851c2deff824e60013b07604a9c64b7b4bf16e0a12f154f3bca6689a9a45437a365547d091b7e559d9cec79544f6b37532dcb2e6ca888d92b2799363086095656e23650aa0a94bc41ed20f32c31685222e5f3b9ab0eebafc806eb37641149947004a4b52a244ef3cecfeb3a2d1a1933e4ed7bd032cbd3b0ad11f3d5c19e2d0", 0x8e, 0x0, 0x1}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x68, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x1) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000001180), &(0x7f00000011c0), 0x2, 0x0) syz_io_uring_setup(0x6d90, &(0x7f0000001340)={0x0, 0x7e35, 0x2, 0x1, 0x191, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000013c0), &(0x7f0000001400)) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0xa9a3, 0x1, 0x2, 0x215, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:39 executing program 3: syz_io_uring_setup(0x686f, &(0x7f0000000d40), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x2, 0x215}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:39 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) 03:24:39 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) move_pages(0x0, 0x6, &(0x7f0000000100)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil], 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 03:24:39 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x13c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:39 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) 03:24:39 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000a40)={&(0x7f0000000540), 0xc, &(0x7f0000000a00)={&(0x7f00000005c0)={0x200, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d1b004dc62aa6bf576fbe544ad25e160472f47cb717df38202"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "fa0342f0cca6757279f9c51e5238a0224f25850819a8"}}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "182ad4b363118e78c1b2b34bd8bbe44a7de9b83f1b3715747b98a3e14093682db013244986e0bc5912fb5779a6def90b31a910c42bc95e28fe1f4cb9475b5569eaa830da8baa3b79a1fc526d470893207bca7e8b2e432e97107a8b563c0c4bb20298a928a2b3e1510e7de101345466e1b0dc827eccd0962f30c7c6431733beeb0ee85383208da3a1cfc54d50d841e4cf643e5cb5aa08db89101a0c7cbf22c90e772115f06013074915383d5a940871bbec0a17f6c1ab7d1c28424c2806acc7061dde53ebd69f36c0aa8a81f2fe7e3717d6a8d9261a743d9fc80dd0bda8ed3f7d399e75875cc509aa4e61"}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x200}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000d00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x480c0080}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x1bc, 0x0, 0x0, 0x0, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}]}, 0x1bc}}, 0x0) r3 = syz_io_uring_setup(0x686f, &(0x7f0000000d40)={0x0, 0x7c2f, 0x10, 0x0, 0x81, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0)=0x0, &(0x7f0000000e00)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000f00)=@IORING_OP_WRITE={0x17, 0x0, 0x4004, @fd, 0x0, &(0x7f0000000e40)="751d97940cc9034f5516011bb3592f851c2deff824e60013b07604a9c64b7b4bf16e0a12f154f3bca6689a9a45437a365547d091b7e559d9cec79544f6b37532dcb2e6ca888d92b2799363086095656e23650aa0a94bc41ed20f32c31685222e5f3b9ab0eebafc806eb37641149947004a4b52a244ef3cecfeb3a2d1a1933e4ed7bd032cbd3b0ad11f3d5c19e2d0", 0x8e, 0x0, 0x1}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x68, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x1) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000001180), &(0x7f00000011c0), 0x2, 0x0) syz_io_uring_setup(0x6d90, &(0x7f0000001340)={0x0, 0x7e35, 0x2, 0x1, 0x191, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000013c0), &(0x7f0000001400)) 03:24:39 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) move_pages(0x0, 0x6, &(0x7f0000000100)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil], 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 03:24:39 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x13c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:39 executing program 3: syz_io_uring_setup(0x686f, &(0x7f0000000d40), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x215}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:39 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) 03:24:39 executing program 2: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2) 03:24:39 executing program 4: move_pages(0x0, 0x6, &(0x7f0000000100)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil], 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 03:24:39 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x13c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:39 executing program 3: syz_io_uring_setup(0x686f, &(0x7f0000000d40), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6051, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x215}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:39 executing program 5: io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) 03:24:39 executing program 2: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2) 03:24:39 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000a40)={&(0x7f0000000540), 0xc, &(0x7f0000000a00)={&(0x7f00000005c0)={0x200, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d1b004dc62aa6bf576fbe544ad25e160472f47cb717df38202"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "fa0342f0cca6757279f9c51e5238a0224f25850819a8"}}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "182ad4b363118e78c1b2b34bd8bbe44a7de9b83f1b3715747b98a3e14093682db013244986e0bc5912fb5779a6def90b31a910c42bc95e28fe1f4cb9475b5569eaa830da8baa3b79a1fc526d470893207bca7e8b2e432e97107a8b563c0c4bb20298a928a2b3e1510e7de101345466e1b0dc827eccd0962f30c7c6431733beeb0ee85383208da3a1cfc54d50d841e4cf643e5cb5aa08db89101a0c7cbf22c90e772115f06013074915383d5a940871bbec0a17f6c1ab7d1c28424c2806acc7061dde53ebd69f36c0aa8a81f2fe7e3717d6a8d9261a743d9fc80dd0bda8ed3f7d399e75875cc509aa4e61"}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x200}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000d00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x480c0080}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x1bc, 0x0, 0x0, 0x0, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}]}, 0x1bc}}, 0x0) r3 = syz_io_uring_setup(0x686f, &(0x7f0000000d40)={0x0, 0x7c2f, 0x10, 0x0, 0x81, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0)=0x0, &(0x7f0000000e00)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000f00)=@IORING_OP_WRITE={0x17, 0x0, 0x4004, @fd, 0x0, &(0x7f0000000e40)="751d97940cc9034f5516011bb3592f851c2deff824e60013b07604a9c64b7b4bf16e0a12f154f3bca6689a9a45437a365547d091b7e559d9cec79544f6b37532dcb2e6ca888d92b2799363086095656e23650aa0a94bc41ed20f32c31685222e5f3b9ab0eebafc806eb37641149947004a4b52a244ef3cecfeb3a2d1a1933e4ed7bd032cbd3b0ad11f3d5c19e2d0", 0x8e, 0x0, 0x1}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x68, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x1) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000001180), &(0x7f00000011c0), 0x2, 0x0) 03:24:39 executing program 4: move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 03:24:39 executing program 5: io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) 03:24:39 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x148, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:39 executing program 3: syz_io_uring_setup(0x686f, &(0x7f0000000d40), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6051, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:39 executing program 2: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2) 03:24:39 executing program 4: move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:24:39 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000a40)={&(0x7f0000000540), 0xc, &(0x7f0000000a00)={&(0x7f00000005c0)={0x200, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d1b004dc62aa6bf576fbe544ad25e160472f47cb717df38202"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "fa0342f0cca6757279f9c51e5238a0224f25850819a8"}}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "182ad4b363118e78c1b2b34bd8bbe44a7de9b83f1b3715747b98a3e14093682db013244986e0bc5912fb5779a6def90b31a910c42bc95e28fe1f4cb9475b5569eaa830da8baa3b79a1fc526d470893207bca7e8b2e432e97107a8b563c0c4bb20298a928a2b3e1510e7de101345466e1b0dc827eccd0962f30c7c6431733beeb0ee85383208da3a1cfc54d50d841e4cf643e5cb5aa08db89101a0c7cbf22c90e772115f06013074915383d5a940871bbec0a17f6c1ab7d1c28424c2806acc7061dde53ebd69f36c0aa8a81f2fe7e3717d6a8d9261a743d9fc80dd0bda8ed3f7d399e75875cc509aa4e61"}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x200}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000d00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x480c0080}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x1bc, 0x0, 0x0, 0x0, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}]}, 0x1bc}}, 0x0) syz_io_uring_setup(0x686f, &(0x7f0000000d40)={0x0, 0x7c2f, 0x10, 0x0, 0x81, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0)=0x0, &(0x7f0000000e00)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000f00)=@IORING_OP_WRITE={0x17, 0x0, 0x4004, @fd, 0x0, &(0x7f0000000e40)="751d97940cc9034f5516011bb3592f851c2deff824e60013b07604a9c64b7b4bf16e0a12f154f3bca6689a9a45437a365547d091b7e559d9cec79544f6b37532dcb2e6ca888d92b2799363086095656e23650aa0a94bc41ed20f32c31685222e5f3b9ab0eebafc806eb37641149947004a4b52a244ef3cecfeb3a2d1a1933e4ed7bd032cbd3b0ad11f3d5c19e2d0", 0x8e, 0x0, 0x1}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x68, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x1) 03:24:39 executing program 5: io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) 03:24:39 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) 03:24:39 executing program 4: syz_io_uring_setup(0x686f, &(0x7f0000000d40), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6051, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:24:39 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x148, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:39 executing program 3: syz_io_uring_setup(0x686f, &(0x7f0000000d40), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6051, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000140)) 03:24:39 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000a40)={&(0x7f0000000540), 0xc, &(0x7f0000000a00)={&(0x7f00000005c0)={0x200, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d1b004dc62aa6bf576fbe544ad25e160472f47cb717df38202"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "fa0342f0cca6757279f9c51e5238a0224f25850819a8"}}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "182ad4b363118e78c1b2b34bd8bbe44a7de9b83f1b3715747b98a3e14093682db013244986e0bc5912fb5779a6def90b31a910c42bc95e28fe1f4cb9475b5569eaa830da8baa3b79a1fc526d470893207bca7e8b2e432e97107a8b563c0c4bb20298a928a2b3e1510e7de101345466e1b0dc827eccd0962f30c7c6431733beeb0ee85383208da3a1cfc54d50d841e4cf643e5cb5aa08db89101a0c7cbf22c90e772115f06013074915383d5a940871bbec0a17f6c1ab7d1c28424c2806acc7061dde53ebd69f36c0aa8a81f2fe7e3717d6a8d9261a743d9fc80dd0bda8ed3f7d399e75875cc509aa4e61"}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x200}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000d00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x480c0080}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x1bc, 0x0, 0x0, 0x0, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}]}, 0x1bc}}, 0x0) syz_io_uring_setup(0x686f, &(0x7f0000000d40)={0x0, 0x7c2f, 0x10, 0x0, 0x81, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0)=0x0, &(0x7f0000000e00)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000f00)=@IORING_OP_WRITE={0x17, 0x0, 0x4004, @fd, 0x0, &(0x7f0000000e40)="751d97940cc9034f5516011bb3592f851c2deff824e60013b07604a9c64b7b4bf16e0a12f154f3bca6689a9a45437a365547d091b7e559d9cec79544f6b37532dcb2e6ca888d92b2799363086095656e23650aa0a94bc41ed20f32c31685222e5f3b9ab0eebafc806eb37641149947004a4b52a244ef3cecfeb3a2d1a1933e4ed7bd032cbd3b0ad11f3d5c19e2d0", 0x8e, 0x0, 0x1}, 0x0) 03:24:39 executing program 5: io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) 03:24:40 executing program 4: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x13c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:40 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000a40)={&(0x7f0000000540), 0xc, &(0x7f0000000a00)={&(0x7f00000005c0)={0x200, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d1b004dc62aa6bf576fbe544ad25e160472f47cb717df38202"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "fa0342f0cca6757279f9c51e5238a0224f25850819a8"}}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "182ad4b363118e78c1b2b34bd8bbe44a7de9b83f1b3715747b98a3e14093682db013244986e0bc5912fb5779a6def90b31a910c42bc95e28fe1f4cb9475b5569eaa830da8baa3b79a1fc526d470893207bca7e8b2e432e97107a8b563c0c4bb20298a928a2b3e1510e7de101345466e1b0dc827eccd0962f30c7c6431733beeb0ee85383208da3a1cfc54d50d841e4cf643e5cb5aa08db89101a0c7cbf22c90e772115f06013074915383d5a940871bbec0a17f6c1ab7d1c28424c2806acc7061dde53ebd69f36c0aa8a81f2fe7e3717d6a8d9261a743d9fc80dd0bda8ed3f7d399e75875cc509aa4e61"}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x200}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000d00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x480c0080}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x1bc, 0x0, 0x0, 0x0, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}]}, 0x1bc}}, 0x0) syz_io_uring_setup(0x686f, &(0x7f0000000d40)={0x0, 0x7c2f, 0x10, 0x0, 0x81, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) 03:24:40 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x148, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:40 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) 03:24:40 executing program 5: io_uring_setup(0x521a, 0x0) 03:24:40 executing program 3: syz_io_uring_setup(0x686f, &(0x7f0000000d40), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6051, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000140)) 03:24:40 executing program 4: syz_io_uring_setup(0x686f, &(0x7f0000000d40), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6051, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000140)) 03:24:40 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000a40)={&(0x7f0000000540), 0xc, &(0x7f0000000a00)={&(0x7f00000005c0)={0x200, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d1b004dc62aa6bf576fbe544ad25e160472f47cb717df38202"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "fa0342f0cca6757279f9c51e5238a0224f25850819a8"}}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "182ad4b363118e78c1b2b34bd8bbe44a7de9b83f1b3715747b98a3e14093682db013244986e0bc5912fb5779a6def90b31a910c42bc95e28fe1f4cb9475b5569eaa830da8baa3b79a1fc526d470893207bca7e8b2e432e97107a8b563c0c4bb20298a928a2b3e1510e7de101345466e1b0dc827eccd0962f30c7c6431733beeb0ee85383208da3a1cfc54d50d841e4cf643e5cb5aa08db89101a0c7cbf22c90e772115f06013074915383d5a940871bbec0a17f6c1ab7d1c28424c2806acc7061dde53ebd69f36c0aa8a81f2fe7e3717d6a8d9261a743d9fc80dd0bda8ed3f7d399e75875cc509aa4e61"}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x200}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000d00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x480c0080}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x1bc, 0x0, 0x0, 0x0, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}]}, 0x1bc}}, 0x0) 03:24:40 executing program 5: io_uring_setup(0x521a, 0x0) 03:24:40 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) 03:24:40 executing program 3: syz_io_uring_setup(0x686f, &(0x7f0000000d40), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6051, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000140)) 03:24:40 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x150, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:40 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000a40)={&(0x7f0000000540), 0xc, &(0x7f0000000a00)={&(0x7f00000005c0)={0x200, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d1b004dc62aa6bf576fbe544ad25e160472f47cb717df38202"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "fa0342f0cca6757279f9c51e5238a0224f25850819a8"}}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "182ad4b363118e78c1b2b34bd8bbe44a7de9b83f1b3715747b98a3e14093682db013244986e0bc5912fb5779a6def90b31a910c42bc95e28fe1f4cb9475b5569eaa830da8baa3b79a1fc526d470893207bca7e8b2e432e97107a8b563c0c4bb20298a928a2b3e1510e7de101345466e1b0dc827eccd0962f30c7c6431733beeb0ee85383208da3a1cfc54d50d841e4cf643e5cb5aa08db89101a0c7cbf22c90e772115f06013074915383d5a940871bbec0a17f6c1ab7d1c28424c2806acc7061dde53ebd69f36c0aa8a81f2fe7e3717d6a8d9261a743d9fc80dd0bda8ed3f7d399e75875cc509aa4e61"}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x200}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000d00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x480c0080}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x1bc, 0x0, 0x0, 0x0, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}]}, 0x1bc}}, 0x0) syz_io_uring_setup(0x686f, &(0x7f0000000d40)={0x0, 0x7c2f, 0x10, 0x0, 0x81, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) 03:24:40 executing program 5: io_uring_setup(0x521a, 0x0) 03:24:40 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000a40)={&(0x7f0000000540), 0xc, &(0x7f0000000a00)={&(0x7f00000005c0)={0x200, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d1b004dc62aa6bf576fbe544ad25e160472f47cb717df38202"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "fa0342f0cca6757279f9c51e5238a0224f25850819a8"}}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "182ad4b363118e78c1b2b34bd8bbe44a7de9b83f1b3715747b98a3e14093682db013244986e0bc5912fb5779a6def90b31a910c42bc95e28fe1f4cb9475b5569eaa830da8baa3b79a1fc526d470893207bca7e8b2e432e97107a8b563c0c4bb20298a928a2b3e1510e7de101345466e1b0dc827eccd0962f30c7c6431733beeb0ee85383208da3a1cfc54d50d841e4cf643e5cb5aa08db89101a0c7cbf22c90e772115f06013074915383d5a940871bbec0a17f6c1ab7d1c28424c2806acc7061dde53ebd69f36c0aa8a81f2fe7e3717d6a8d9261a743d9fc80dd0bda8ed3f7d399e75875cc509aa4e61"}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x200}}, 0x0) 03:24:40 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) recvfrom$rose(r1, &(0x7f0000000080)=""/158, 0x9e, 0x1, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x2, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) 03:24:40 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x150, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:40 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) r1 = fork() move_pages(r1, 0x6, &(0x7f0000000100)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil], 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4}) 03:24:40 executing program 3: syz_io_uring_setup(0x686f, &(0x7f0000000d40), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6051, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), 0x0) 03:24:40 executing program 5: io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0x0, 0x26, 0x3, 0x2cd}) 03:24:40 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) 03:24:40 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) recvfrom$rose(r1, &(0x7f0000000080)=""/158, 0x9e, 0x1, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x2, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) 03:24:40 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x150, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:40 executing program 3: syz_io_uring_setup(0x686f, &(0x7f0000000d40), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6051, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), 0x0) 03:24:40 executing program 5: io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x2cd}) 03:24:40 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) 03:24:40 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) r1 = fork() move_pages(r1, 0x6, &(0x7f0000000100)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil], 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4}) 03:24:40 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) recvfrom$rose(r1, &(0x7f0000000080)=""/158, 0x9e, 0x1, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x2, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) 03:24:41 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x148, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:41 executing program 3: syz_io_uring_setup(0x686f, &(0x7f0000000d40), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6051, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), 0x0) 03:24:41 executing program 5: io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x2cd}) 03:24:41 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r0, 0x0, 0x0) recvfrom$rose(r0, &(0x7f0000000080)=""/158, 0x9e, 0x1, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x2, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 03:24:41 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) 03:24:41 executing program 5: io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x2cd}) 03:24:41 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x80) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000500)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) 03:24:41 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) r0 = fork() move_pages(r0, 0x6, &(0x7f0000000100)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil], 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 03:24:41 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x148, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:41 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r0, 0x0, 0x0) recvfrom$rose(r0, &(0x7f0000000080)=""/158, 0x9e, 0x1, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x2, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) 03:24:41 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) 03:24:41 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r0, 0x0, 0x0) recvfrom$rose(r0, &(0x7f0000000080)=""/158, 0x9e, 0x1, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x2, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 03:24:41 executing program 5: io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0x0, 0x26, 0x0, 0x2cd}) 03:24:41 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x148, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:41 executing program 3: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x148, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:41 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r0, 0x0, 0x0) recvfrom$rose(r0, &(0x7f0000000080)=""/158, 0x9e, 0x1, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x2, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, 0x0) 03:24:41 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) 03:24:41 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200080, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4044000) 03:24:41 executing program 5: io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0x0, 0x26}) 03:24:41 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x150, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:41 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r0, 0x0, 0x0) recvfrom$rose(r0, &(0x7f0000000080)=""/158, 0x9e, 0x1, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x2, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) 03:24:41 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r0, 0x0, 0x0) recvfrom$rose(r0, &(0x7f0000000080)=""/158, 0x9e, 0x1, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x2, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 03:24:41 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x4004005) 03:24:41 executing program 4: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x148, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:41 executing program 5: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x148, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:41 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x150, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:41 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x3, 0x0, 0x0, 0x0, 0xfffffffd}}) 03:24:41 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) recvfrom$rose(r0, &(0x7f0000000080)=""/158, 0x9e, 0x1, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x2, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 03:24:42 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 03:24:42 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x3, 0x8, 0x3, 0xfffff05f}}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000100)={{0x2, 0x0, 0x80000001, 0x0, 0x8}, 0x1, 0x2}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/170) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) 03:24:42 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) r1 = fork() move_pages(r1, 0x6, &(0x7f0000000100)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil], 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4}) 03:24:42 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x150, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:42 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000080)=""/158, 0x9e, 0x1, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x2, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 03:24:42 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x3, 0x0, 0x0, 0x0, 0xfffffffd}}) 03:24:42 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0x4000000000}) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) 03:24:42 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x3, 0x0, 0x0, 0x0, 0xfffffffd}}) 03:24:42 executing program 2: recvfrom$rose(0xffffffffffffffff, &(0x7f0000000080)=""/158, 0x9e, 0x1, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x2, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 03:24:42 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:42 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x3, 0x8, 0x3, 0xfffff05f}}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000100)={{0x2, 0x0, 0x80000001, 0x0, 0x8}, 0x1, 0x2}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/170) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) 03:24:42 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) r1 = fork() move_pages(r1, 0x6, &(0x7f0000000100)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil], 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4}) 03:24:42 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2) io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) 03:24:42 executing program 2: recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x2, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 03:24:42 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:42 executing program 3: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000440)={{0x3, 0x0, 0x0, 0x0, 0xfffffffd}}) 03:24:42 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x3, 0x8, 0x3, 0xfffff05f}}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000100)={{0x2, 0x0, 0x80000001, 0x0, 0x8}, 0x1, 0x2}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/170) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) 03:24:42 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) r1 = fork() move_pages(r1, 0x6, &(0x7f0000000100)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil], 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 03:24:42 executing program 1: io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) 03:24:42 executing program 2: recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x2, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 03:24:42 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:42 executing program 3: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000440)={{0x3, 0x0, 0x0, 0x0, 0xfffffffd}}) 03:24:42 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x3, 0x8, 0x3, 0xfffff05f}}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000100)={{0x2, 0x0, 0x80000001, 0x0, 0x8}, 0x1, 0x2}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/170) 03:24:42 executing program 1: io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) 03:24:42 executing program 2: recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 03:24:42 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 03:24:42 executing program 3: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000440)={{0x3, 0x0, 0x0, 0x0, 0xfffffffd}}) 03:24:42 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x13c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:43 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x3, 0x8, 0x3, 0xfffff05f}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/170) 03:24:43 executing program 1: io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) 03:24:43 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x3, 0x8, 0x3, 0xfffff05f}}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000100)={{0x2, 0x0, 0x80000001, 0x0, 0x8}, 0x1, 0x2}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/170) 03:24:43 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x3, 0x0, 0x0, 0x0, 0xfffffffd}}) 03:24:43 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x13c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:43 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/170) 03:24:43 executing program 1: io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xbd72, 0x26, 0x3, 0x2cd}) 03:24:43 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 03:24:43 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 03:24:43 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x3, 0x0, 0x0, 0x0, 0xfffffffd}}) 03:24:43 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x13c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:43 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/170) 03:24:43 executing program 1: io_uring_setup(0x521a, 0x0) 03:24:43 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 03:24:43 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 03:24:43 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x148, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:43 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x3, 0x0, 0x0, 0x0, 0xfffffffd}}) 03:24:43 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/170) 03:24:43 executing program 1: io_uring_setup(0x521a, 0x0) 03:24:43 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 03:24:43 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x148, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:43 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000440)={{0x3, 0x0, 0x0, 0x0, 0xfffffffd}}) 03:24:43 executing program 5: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x3, 0x8, 0x3, 0xfffff05f}}) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000000)=""/170) 03:24:43 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 03:24:43 executing program 1: io_uring_setup(0x521a, 0x0) 03:24:43 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 03:24:43 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x148, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:43 executing program 5: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x3, 0x8, 0x3, 0xfffff05f}}) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000000)=""/170) 03:24:43 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000440)={{0x3, 0x0, 0x0, 0x0, 0xfffffffd}}) 03:24:43 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) 03:24:44 executing program 1: io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0x0, 0x26, 0x3, 0x2cd}) 03:24:44 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 03:24:44 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x150, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:44 executing program 5: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x3, 0x8, 0x3, 0xfffff05f}}) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000000)=""/170) 03:24:44 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000440)={{0x3, 0x0, 0x0, 0x0, 0xfffffffd}}) 03:24:44 executing program 1: io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x2cd}) 03:24:44 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) 03:24:44 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x150, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:44 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 03:24:44 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x3, 0x8, 0x3, 0xfffff05f}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/170) 03:24:44 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, 0x0) 03:24:44 executing program 1: io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x2cd}) 03:24:44 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) [ 623.514953][ T3237] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.521360][ T3237] ieee802154 phy1 wpan1: encryption failed: -22 03:24:44 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x150, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:44 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x3, 0x8, 0x3, 0xfffff05f}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/170) 03:24:44 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 03:24:44 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, 0x0) 03:24:44 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) socket$l2tp6(0xa, 0x2, 0x73) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) 03:24:44 executing program 1: io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x2cd}) 03:24:44 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x13c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:44 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x3, 0x8, 0x3, 0xfffff05f}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/170) 03:24:44 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 03:24:44 executing program 1: io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0x0, 0x26, 0x0, 0x2cd}) 03:24:44 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, 0x0) 03:24:44 executing program 1: io_uring_setup(0x521a, &(0x7f0000000000)={0x0, 0x0, 0x26}) 03:24:44 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) 03:24:44 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 03:24:44 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x13c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:44 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x0, 0x0, 0x0, 0x0, 0xfffffffd}}) 03:24:44 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x3, 0x8, 0x3, 0xfffff05f}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/170) 03:24:45 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) 03:24:45 executing program 1: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x13c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:45 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 03:24:45 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x13c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:45 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x0, 0x0, 0x0, 0x0, 0xfffffffd}}) 03:24:45 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x3, 0x8, 0x3, 0xfffff05f}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/170) 03:24:45 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 03:24:45 executing program 2: openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) 03:24:45 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x0, 0x0, 0x0, 0x0, 0xfffffffd}}) 03:24:45 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 03:24:45 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x100, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:45 executing program 2: openat$adsp1(0xffffffffffffff9c, 0x0, 0x40, 0x0) 03:24:45 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x3, 0x8, 0x3, 0xfffff05f}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/170) 03:24:45 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x3}}) 03:24:45 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 03:24:45 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x100, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:45 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 03:24:45 executing program 2: openat$adsp1(0xffffffffffffff9c, 0x0, 0x40, 0x0) 03:24:45 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/170) 03:24:45 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x3}}) 03:24:45 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x100, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:45 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 03:24:45 executing program 2: openat$adsp1(0xffffffffffffff9c, 0x0, 0x40, 0x0) 03:24:45 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 03:24:45 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/170) 03:24:45 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x3}}) 03:24:45 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 03:24:45 executing program 2: openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 03:24:45 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) socket$l2tp6(0xa, 0x2, 0x73) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) 03:24:45 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x148, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:46 executing program 3: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x13c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:46 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/170) 03:24:46 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) 03:24:46 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x148, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:46 executing program 4: openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 03:24:46 executing program 2: openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 03:24:46 executing program 3: openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 03:24:46 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x8, 0x3, 0xfffff05f}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/170) 03:24:46 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x148, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:46 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) 03:24:46 executing program 4: openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 03:24:46 executing program 2: openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 03:24:46 executing program 3: openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 03:24:46 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x8, 0x3, 0xfffff05f}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/170) 03:24:46 executing program 1: openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) 03:24:46 executing program 4: openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 03:24:46 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x150, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:46 executing program 2: openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 03:24:46 executing program 1: openat$adsp1(0xffffffffffffff9c, 0x0, 0x40, 0x0) 03:24:46 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x8, 0x3, 0xfffff05f}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/170) 03:24:46 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x0, 0x8, 0x3, 0xfffff05f}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/170) 03:24:46 executing program 3: openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 03:24:46 executing program 2: openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 03:24:46 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x150, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:46 executing program 1: openat$adsp1(0xffffffffffffff9c, 0x0, 0x40, 0x0) 03:24:46 executing program 4: openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) 03:24:46 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x3, 0x0, 0x3, 0xfffff05f}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/170) 03:24:46 executing program 2: openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 03:24:46 executing program 3: openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:24:46 executing program 1: openat$adsp1(0xffffffffffffff9c, 0x0, 0x40, 0x0) 03:24:47 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x150, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:47 executing program 1: openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 03:24:47 executing program 4: openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) 03:24:47 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x3, 0x0, 0x0, 0xfffff05f}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/170) 03:24:47 executing program 3: openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:24:47 executing program 2: openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:24:47 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x13c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:47 executing program 4: openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) 03:24:47 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/170) 03:24:47 executing program 3: openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:24:47 executing program 1: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x150, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:47 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x13c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:47 executing program 2: openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:24:47 executing program 1: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x13c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:47 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000000)=""/170) 03:24:47 executing program 4: openat$adsp1(0xffffffffffffff9c, 0x0, 0x40, 0x0) 03:24:47 executing program 3: openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 03:24:47 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x13c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:47 executing program 2: openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:24:47 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000000)=""/170) 03:24:47 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) 03:24:47 executing program 4: openat$adsp1(0xffffffffffffff9c, 0x0, 0x40, 0x0) 03:24:47 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 03:24:47 executing program 2: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x13c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:47 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x134, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:47 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000000)=""/170) 03:24:47 executing program 4: openat$adsp1(0xffffffffffffff9c, 0x0, 0x40, 0x0) 03:24:47 executing program 1: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x150, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:48 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) 03:24:48 executing program 2: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x148, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:48 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x12c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:48 executing program 1: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x148, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:48 executing program 4: openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 03:24:48 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) 03:24:48 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 03:24:48 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x124, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:48 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/170) 03:24:48 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 03:24:48 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 03:24:48 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x0, 0x0, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0xfffffc00, 0x3}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 03:24:48 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x0, 0x0, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0xfffffc00, 0x3}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 03:24:48 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x124, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:48 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) r1 = fork() move_pages(r1, 0x6, &(0x7f0000000100)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil], 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4}) 03:24:48 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 03:24:48 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) io_uring_setup(0x11f2, &(0x7f0000000000)={0x0, 0x9b2, 0x1, 0x3, 0x2a}) 03:24:48 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 03:24:48 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x0, 0x0, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0xfffffc00, 0x3}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 03:24:48 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x124, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:48 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 03:24:48 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r2, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x9, 0x8001, 0x70, @dev={0xfe, 0x80, '\x00', 0x3e}, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x1, 0x8, 0x2}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002cbd7000fcdbdf250d00000008003c004000000008003b00faffffff08000300", @ANYRES32=r4, @ANYBLOB="c560a4290160a6cf2864dbcb6e06666b09571e181118ded53c2bd7a1"], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, 0x0) connect$rose(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x5, r4, 0x2d}, 0x10) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000080)=""/33) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000004, 0x50, 0xffffffffffffffff, 0x10000000) r6 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x9, &(0x7f0000000000)=[r6], 0x1}, 0x10001) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 03:24:48 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x0, 0x0, 0x0, 0x1}}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) 03:24:48 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x0, 0x0, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0xfffffc00, 0x3}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 03:24:48 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 03:24:49 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x12c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:49 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) 03:24:49 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x0, 0x0, 0x0, 0x1}}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) 03:24:49 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r2, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x9, 0x8001, 0x70, @dev={0xfe, 0x80, '\x00', 0x3e}, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x1, 0x8, 0x2}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002cbd7000fcdbdf250d00000008003c004000000008003b00faffffff08000300", @ANYRES32=r4, @ANYBLOB="c560a4290160a6cf2864dbcb6e06666b09571e181118ded53c2bd7a1"], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, 0x0) connect$rose(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x5, r4, 0x2d}, 0x10) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000080)=""/33) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000004, 0x50, 0xffffffffffffffff, 0x10000000) r6 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x9, &(0x7f0000000000)=[r6], 0x1}, 0x10001) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 03:24:49 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x0, 0x0, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0xfffffc00, 0x3}) 03:24:49 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x12c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:49 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) 03:24:49 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) 03:24:49 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x0, 0x0, 0x0, 0x1}}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) 03:24:49 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r2, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x9, 0x8001, 0x70, @dev={0xfe, 0x80, '\x00', 0x3e}, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x1, 0x8, 0x2}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002cbd7000fcdbdf250d00000008003c004000000008003b00faffffff08000300", @ANYRES32=r4, @ANYBLOB="c560a4290160a6cf2864dbcb6e06666b09571e181118ded53c2bd7a1"], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, 0x0) connect$rose(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x5, r4, 0x2d}, 0x10) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000080)=""/33) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000004, 0x50, 0xffffffffffffffff, 0x10000000) r6 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x9, &(0x7f0000000000)=[r6], 0x1}, 0x10001) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 03:24:49 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x0, 0x0, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) 03:24:49 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x12c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:49 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) 03:24:49 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) 03:24:49 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x0, 0x0, 0x0, 0x1}}) socket$inet_udplite(0x2, 0x2, 0x88) 03:24:49 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r2, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x9, 0x8001, 0x70, @dev={0xfe, 0x80, '\x00', 0x3e}, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x1, 0x8, 0x2}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002cbd7000fcdbdf250d00000008003c004000000008003b00faffffff08000300", @ANYRES32=r4, @ANYBLOB="c560a4290160a6cf2864dbcb6e06666b09571e181118ded53c2bd7a1"], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, 0x0) connect$rose(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x5, r4, 0x2d}, 0x10) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000080)=""/33) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000004, 0x50, 0xffffffffffffffff, 0x10000000) r6 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x9, &(0x7f0000000000)=[r6], 0x1}, 0x10001) 03:24:49 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x0, 0x0, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) 03:24:49 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x124, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:49 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) 03:24:49 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) 03:24:49 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x0, 0x0, 0x0, 0x1}}) 03:24:49 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) 03:24:49 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r2, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x9, 0x8001, 0x70, @dev={0xfe, 0x80, '\x00', 0x3e}, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x1, 0x8, 0x2}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002cbd7000fcdbdf250d00000008003c004000000008003b00faffffff08000300", @ANYRES32=r4, @ANYBLOB="c560a4290160a6cf2864dbcb6e06666b09571e181118ded53c2bd7a1"], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, 0x0) connect$rose(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x5, r4, 0x2d}, 0x10) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000080)=""/33) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000004, 0x50, 0xffffffffffffffff, 0x10000000) socket$inet_udplite(0x2, 0x2, 0x88) 03:24:49 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x124, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:49 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) socket$l2tp6(0xa, 0x2, 0x73) 03:24:49 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) 03:24:49 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) 03:24:50 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r2, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x9, 0x8001, 0x70, @dev={0xfe, 0x80, '\x00', 0x3e}, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x1, 0x8, 0x2}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002cbd7000fcdbdf250d00000008003c004000000008003b00faffffff08000300", @ANYRES32=r4, @ANYBLOB="c560a4290160a6cf2864dbcb6e06666b09571e181118ded53c2bd7a1"], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, 0x0) connect$rose(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x5, r4, 0x2d}, 0x10) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000080)=""/33) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000004, 0x50, 0xffffffffffffffff, 0x10000000) 03:24:50 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 03:24:50 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) 03:24:50 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x124, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:50 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) socket$l2tp6(0xa, 0x2, 0x73) 03:24:50 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) 03:24:50 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) socket$l2tp6(0xa, 0x2, 0x73) 03:24:50 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) 03:24:50 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x12c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:50 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r2, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x9, 0x8001, 0x70, @dev={0xfe, 0x80, '\x00', 0x3e}, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x1, 0x8, 0x2}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002cbd7000fcdbdf250d00000008003c004000000008003b00faffffff08000300", @ANYRES32=r4, @ANYBLOB="c560a4290160a6cf2864dbcb6e06666b09571e181118ded53c2bd7a1"], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, 0x0) connect$rose(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x5, r4, 0x2d}, 0x10) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000080)=""/33) 03:24:50 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 03:24:50 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) 03:24:50 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) 03:24:50 executing program 2: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x124, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:50 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r2, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x9, 0x8001, 0x70, @dev={0xfe, 0x80, '\x00', 0x3e}, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x1, 0x8, 0x2}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002cbd7000fcdbdf250d00000008003c004000000008003b00faffffff08000300", @ANYRES32=r4, @ANYBLOB="c560a4290160a6cf2864dbcb6e06666b09571e181118ded53c2bd7a1"], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, 0x0) connect$rose(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x5, r4, 0x2d}, 0x10) 03:24:50 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x12c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:50 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 03:24:50 executing program 5: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x12c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:50 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) 03:24:50 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x124, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:50 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r2, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x9, 0x8001, 0x70, @dev={0xfe, 0x80, '\x00', 0x3e}, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x1, 0x8, 0x2}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002cbd7000fcdbdf250d00000008003c004000000008003b00faffffff08000300", @ANYRES32=r4, @ANYBLOB="c560a4290160a6cf2864dbcb6e06666b09571e181118ded53c2bd7a1"], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, 0x0) connect$rose(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x5, r4, 0x2d}, 0x10) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000080)=""/33) 03:24:50 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 03:24:50 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r2, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x9, 0x8001, 0x70, @dev={0xfe, 0x80, '\x00', 0x3e}, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x1, 0x8, 0x2}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002cbd7000fcdbdf250d00000008003c004000000008003b00faffffff08000300", @ANYRES32=r4, @ANYBLOB="c560a4290160a6cf2864dbcb6e06666b09571e181118ded53c2bd7a1"], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, 0x0) connect$rose(0xffffffffffffffff, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x5, r4, 0x2d}, 0x10) 03:24:50 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) 03:24:50 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r2, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x9, 0x8001, 0x70, @dev={0xfe, 0x80, '\x00', 0x3e}, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x1, 0x8, 0x2}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002cbd7000fcdbdf250d00000008003c004000000008003b00faffffff08000300", @ANYRES32=r4, @ANYBLOB="c560a4290160a6cf2864dbcb6e06666b09571e181118ded53c2bd7a1"], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, 0x0) connect$rose(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x5, r4, 0x2d}, 0x10) 03:24:50 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:50 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r2, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x9, 0x8001, 0x70, @dev={0xfe, 0x80, '\x00', 0x3e}, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x1, 0x8, 0x2}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002cbd7000fcdbdf250d00000008003c004000000008003b00faffffff08000300", @ANYRES32=r4, @ANYBLOB="c560a4290160a6cf2864dbcb6e06666b09571e181118ded53c2bd7a1"], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x5, r4, 0x2d}, 0x10) 03:24:50 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) 03:24:50 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r2, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x9, 0x8001, 0x70, @dev={0xfe, 0x80, '\x00', 0x3e}, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x1, 0x8, 0x2}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002cbd7000fcdbdf250d00000008003c004000000008003b00faffffff08000300", @ANYRES32=r4, @ANYBLOB="c560a4290160a6cf2864dbcb6e06666b09571e181118ded53c2bd7a1"], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, 0x0) connect$rose(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x5, r4, 0x2d}, 0x10) 03:24:51 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) 03:24:51 executing program 5: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x124, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:51 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:51 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r2, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x9, 0x8001, 0x70, @dev={0xfe, 0x80, '\x00', 0x3e}, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x1, 0x8, 0x2}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002cbd7000fcdbdf250d00000008003c004000000008003b00faffffff08000300", @ANYRES32=r4, @ANYBLOB="c560a4290160a6cf2864dbcb6e06666b09571e181118ded53c2bd7a1"], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x5, r4, 0x2d}, 0x10) 03:24:51 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) 03:24:51 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="5b02869758f91c21d41fea19e569c98696d2bfc8d94375288448d6c52decb952fa6f071f004b9018208d757711972145aef78e323ed3b521246fb9202e9294df022439f9d916f18140cba6a99997d0b30603", 0x52}], 0x1, 0x6, 0x2006d632, 0x9) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) 03:24:51 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x1ff) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) connect$rose(r4, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x8) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00000000891a6a451c8e526b513897bf2b3929ab57d9c74c4e64f432aab3ea514ca86808bbc23b8869c5b0213e7be34591e8e8b211c834d78bbfb191f5f799dd28b1c15dcbed1366eac8e691f38310a65988dbf43b32063f1b3f6112", @ANYRES16=0x0, @ANYBLOB="200028bd7000fedbdf2502000000080006000000010050000380080005000a01010008000300010000000800030002000000060007004e210000060007004e200000060007004e220000080001000000000014000600"/102], 0x6c}, 0x1, 0x0, 0x0, 0x10000040}, 0x24040808) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0)="cdbe009f1c3a6808978288c1c638d1dda5af833e6af48866cf8630d2940557019c6847d8679087616a0f0fbfc3bd293d861b08f96fa6abe1598ba42991bf3f9f975fea33b2d29788a4d36d6a7d4bd28b3a1ec3ae15b5c5291e03f623df16a9e6913d38", 0x63}, 0x68) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3a9, @null, @bpq0, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) 03:24:51 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x1ff) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) connect$rose(r4, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x8) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00000000891a6a451c8e526b513897bf2b3929ab57d9c74c4e64f432aab3ea514ca86808bbc23b8869c5b0213e7be34591e8e8b211c834d78bbfb191f5f799dd28b1c15dcbed1366eac8e691f38310a65988dbf43b32063f1b3f6112", @ANYRES16=0x0, @ANYBLOB="200028bd7000fedbdf2502000000080006000000010050000380080005000a01010008000300010000000800030002000000060007004e210000060007004e200000060007004e220000080001000000000014000600"/102], 0x6c}, 0x1, 0x0, 0x0, 0x10000040}, 0x24040808) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0)="cdbe009f1c3a6808978288c1c638d1dda5af833e6af48866cf8630d2940557019c6847d8679087616a0f0fbfc3bd293d861b08f96fa6abe1598ba42991bf3f9f975fea33b2d29788a4d36d6a7d4bd28b3a1ec3ae15b5c5291e03f623df16a9e6913d38", 0x63}, 0x68) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3a9, @null, @bpq0, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) 03:24:51 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:51 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r0, 0x0, 0x0, 0x6, 0x2006d632, 0x9) 03:24:51 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r2, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x9, 0x8001, 0x70, @dev={0xfe, 0x80, '\x00', 0x3e}, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x1, 0x8, 0x2}}) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x5, r4, 0x2d}, 0x10) 03:24:51 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r2, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x9, 0x8001, 0x70, @dev={0xfe, 0x80, '\x00', 0x3e}, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x1, 0x8, 0x2}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002cbd7000fcdbdf250d00000008003c004000000008003b00faffffff08000300", @ANYRES32=r4, @ANYBLOB="c560a4290160a6cf2864dbcb6e06666b09571e181118ded53c2bd7a1"], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x5, r4, 0x2d}, 0x10) 03:24:51 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x1ff) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) connect$rose(r4, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x8) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00000000891a6a451c8e526b513897bf2b3929ab57d9c74c4e64f432aab3ea514ca86808bbc23b8869c5b0213e7be34591e8e8b211c834d78bbfb191f5f799dd28b1c15dcbed1366eac8e691f38310a65988dbf43b32063f1b3f6112", @ANYRES16=0x0, @ANYBLOB="200028bd7000fedbdf2502000000080006000000010050000380080005000a01010008000300010000000800030002000000060007004e210000060007004e200000060007004e220000080001000000000014000600"/102], 0x6c}, 0x1, 0x0, 0x0, 0x10000040}, 0x24040808) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0)="cdbe009f1c3a6808978288c1c638d1dda5af833e6af48866cf8630d2940557019c6847d8679087616a0f0fbfc3bd293d861b08f96fa6abe1598ba42991bf3f9f975fea33b2d29788a4d36d6a7d4bd28b3a1ec3ae15b5c5291e03f623df16a9e6913d38", 0x63}, 0x68) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3a9, @null, @bpq0, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) 03:24:51 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x124, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:51 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x1ff) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) connect$rose(r4, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x8) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00000000891a6a451c8e526b513897bf2b3929ab57d9c74c4e64f432aab3ea514ca86808bbc23b8869c5b0213e7be34591e8e8b211c834d78bbfb191f5f799dd28b1c15dcbed1366eac8e691f38310a65988dbf43b32063f1b3f6112", @ANYRES16=0x0, @ANYBLOB="200028bd7000fedbdf2502000000080006000000010050000380080005000a01010008000300010000000800030002000000060007004e210000060007004e200000060007004e220000080001000000000014000600"/102], 0x6c}, 0x1, 0x0, 0x0, 0x10000040}, 0x24040808) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0)="cdbe009f1c3a6808978288c1c638d1dda5af833e6af48866cf8630d2940557019c6847d8679087616a0f0fbfc3bd293d861b08f96fa6abe1598ba42991bf3f9f975fea33b2d29788a4d36d6a7d4bd28b3a1ec3ae15b5c5291e03f623df16a9e6913d38", 0x63}, 0x68) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3a9, @null, @bpq0, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) 03:24:51 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r2, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x5, 0x0, 0x2d}, 0x10) 03:24:51 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r0, 0x0, 0x0, 0x0, 0x2006d632, 0x9) 03:24:51 executing program 3: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:51 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x124, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:51 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x9) 03:24:51 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r2, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r3, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x5, 0x0, 0x2d}, 0x10) 03:24:51 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x1ff) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) connect$rose(r4, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x8) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00000000891a6a451c8e526b513897bf2b3929ab57d9c74c4e64f432aab3ea514ca86808bbc23b8869c5b0213e7be34591e8e8b211c834d78bbfb191f5f799dd28b1c15dcbed1366eac8e691f38310a65988dbf43b32063f1b3f6112", @ANYRES16=0x0, @ANYBLOB="200028bd7000fedbdf2502000000080006000000010050000380080005000a01010008000300010000000800030002000000060007004e210000060007004e200000060007004e220000080001000000000014000600"/102], 0x6c}, 0x1, 0x0, 0x0, 0x10000040}, 0x24040808) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0)="cdbe009f1c3a6808978288c1c638d1dda5af833e6af48866cf8630d2940557019c6847d8679087616a0f0fbfc3bd293d861b08f96fa6abe1598ba42991bf3f9f975fea33b2d29788a4d36d6a7d4bd28b3a1ec3ae15b5c5291e03f623df16a9e6913d38", 0x63}, 0x68) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3a9, @null, @bpq0, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) 03:24:51 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x1ff) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) connect$rose(r4, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x8) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00000000891a6a451c8e526b513897bf2b3929ab57d9c74c4e64f432aab3ea514ca86808bbc23b8869c5b0213e7be34591e8e8b211c834d78bbfb191f5f799dd28b1c15dcbed1366eac8e691f38310a65988dbf43b32063f1b3f6112", @ANYRES16=0x0, @ANYBLOB="200028bd7000fedbdf2502000000080006000000010050000380080005000a01010008000300010000000800030002000000060007004e210000060007004e200000060007004e220000080001000000000014000600"/102], 0x6c}, 0x1, 0x0, 0x0, 0x10000040}, 0x24040808) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0)="cdbe009f1c3a6808978288c1c638d1dda5af833e6af48866cf8630d2940557019c6847d8679087616a0f0fbfc3bd293d861b08f96fa6abe1598ba42991bf3f9f975fea33b2d29788a4d36d6a7d4bd28b3a1ec3ae15b5c5291e03f623df16a9e6913d38", 0x63}, 0x68) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3a9, @null, @bpq0, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) 03:24:51 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r2, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x5, 0x0, 0x2d}, 0x10) 03:24:51 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r2, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x5, 0x0, 0x2d}, 0x10) 03:24:51 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:24:51 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:52 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x1ff) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) connect$rose(r4, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x8) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00000000891a6a451c8e526b513897bf2b3929ab57d9c74c4e64f432aab3ea514ca86808bbc23b8869c5b0213e7be34591e8e8b211c834d78bbfb191f5f799dd28b1c15dcbed1366eac8e691f38310a65988dbf43b32063f1b3f6112", @ANYRES16=0x0, @ANYBLOB="200028bd7000fedbdf2502000000080006000000010050000380080005000a01010008000300010000000800030002000000060007004e210000060007004e200000060007004e220000080001000000000014000600"/102], 0x6c}, 0x1, 0x0, 0x0, 0x10000040}, 0x24040808) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0)="cdbe009f1c3a6808978288c1c638d1dda5af833e6af48866cf8630d2940557019c6847d8679087616a0f0fbfc3bd293d861b08f96fa6abe1598ba42991bf3f9f975fea33b2d29788a4d36d6a7d4bd28b3a1ec3ae15b5c5291e03f623df16a9e6913d38", 0x63}, 0x68) 03:24:52 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x1ff) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) connect$rose(r4, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x8) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00000000891a6a451c8e526b513897bf2b3929ab57d9c74c4e64f432aab3ea514ca86808bbc23b8869c5b0213e7be34591e8e8b211c834d78bbfb191f5f799dd28b1c15dcbed1366eac8e691f38310a65988dbf43b32063f1b3f6112", @ANYRES16=0x0, @ANYBLOB="200028bd7000fedbdf2502000000080006000000010050000380080005000a01010008000300010000000800030002000000060007004e210000060007004e200000060007004e220000080001000000000014000600"/102], 0x6c}, 0x1, 0x0, 0x0, 0x10000040}, 0x24040808) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0)="cdbe009f1c3a6808978288c1c638d1dda5af833e6af48866cf8630d2940557019c6847d8679087616a0f0fbfc3bd293d861b08f96fa6abe1598ba42991bf3f9f975fea33b2d29788a4d36d6a7d4bd28b3a1ec3ae15b5c5291e03f623df16a9e6913d38", 0x63}, 0x68) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3a9, @null, @bpq0, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) 03:24:52 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r2, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x5, 0x0, 0x2d}, 0x10) 03:24:52 executing program 1: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x124, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:52 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r2, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x5, 0x0, 0x2d}, 0x10) 03:24:52 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:52 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x1ff) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) connect$rose(r4, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x8) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00000000891a6a451c8e526b513897bf2b3929ab57d9c74c4e64f432aab3ea514ca86808bbc23b8869c5b0213e7be34591e8e8b211c834d78bbfb191f5f799dd28b1c15dcbed1366eac8e691f38310a65988dbf43b32063f1b3f6112", @ANYRES16=0x0, @ANYBLOB="200028bd7000fedbdf2502000000080006000000010050000380080005000a01010008000300010000000800030002000000060007004e210000060007004e200000060007004e220000080001000000000014000600"/102], 0x6c}, 0x1, 0x0, 0x0, 0x10000040}, 0x24040808) 03:24:52 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x1ff) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) connect$rose(r4, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x8) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00000000891a6a451c8e526b513897bf2b3929ab57d9c74c4e64f432aab3ea514ca86808bbc23b8869c5b0213e7be34591e8e8b211c834d78bbfb191f5f799dd28b1c15dcbed1366eac8e691f38310a65988dbf43b32063f1b3f6112", @ANYRES16=0x0, @ANYBLOB="200028bd7000fedbdf2502000000080006000000010050000380080005000a01010008000300010000000800030002000000060007004e210000060007004e200000060007004e220000080001000000000014000600"/102], 0x6c}, 0x1, 0x0, 0x0, 0x10000040}, 0x24040808) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0)="cdbe009f1c3a6808978288c1c638d1dda5af833e6af48866cf8630d2940557019c6847d8679087616a0f0fbfc3bd293d861b08f96fa6abe1598ba42991bf3f9f975fea33b2d29788a4d36d6a7d4bd28b3a1ec3ae15b5c5291e03f623df16a9e6913d38", 0x63}, 0x68) 03:24:52 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x5, 0x0, 0x2d}, 0x10) 03:24:52 executing program 1: ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4302) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) 03:24:52 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r2, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x5, 0x0, 0x2d}, 0x10) 03:24:52 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x114, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:52 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x1ff) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) connect$rose(r4, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x8) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00000000891a6a451c8e526b513897bf2b3929ab57d9c74c4e64f432aab3ea514ca86808bbc23b8869c5b0213e7be34591e8e8b211c834d78bbfb191f5f799dd28b1c15dcbed1366eac8e691f38310a65988dbf43b32063f1b3f6112", @ANYRES16=0x0, @ANYBLOB="200028bd7000fedbdf2502000000080006000000010050000380080005000a01010008000300010000000800030002000000060007004e210000060007004e200000060007004e220000080001000000000014000600"/102], 0x6c}, 0x1, 0x0, 0x0, 0x10000040}, 0x24040808) 03:24:52 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x1ff) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) connect$rose(r4, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x8) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) 03:24:52 executing program 1: ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4302) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) 03:24:52 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x5, 0x0, 0x2d}, 0x10) 03:24:52 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r2, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) 03:24:52 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x114, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:52 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x1ff) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) connect$rose(r4, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x8) connect$rose(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) 03:24:52 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x1ff) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) connect$rose(r4, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x8) connect$rose(r3, 0x0, 0x0) 03:24:52 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x5, 0x0, 0x2d}, 0x10) 03:24:52 executing program 1: ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4302) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) 03:24:52 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r2, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r3, 0x0, 0x0) 03:24:52 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x114, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:52 executing program 1: ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4302) 03:24:53 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x1ff) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) connect$rose(r4, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x8) connect$rose(r3, 0x0, 0x0) 03:24:53 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x5, 0x0, 0x2d}, 0x10) 03:24:53 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x1ff) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) connect$rose(r4, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x8) 03:24:53 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r2, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 03:24:53 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4302) 03:24:53 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x114, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:53 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x1ff) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) connect$rose(r4, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x8) 03:24:53 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x5, 0x0, 0x2d}, 0x10) 03:24:53 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x1ff) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) connect$rose(r4, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, 0x0) 03:24:53 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r2, 0x0, 0x0) 03:24:53 executing program 1: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x4302) 03:24:53 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x114, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:53 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x1ff) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) connect$rose(r4, 0x0, 0x0) 03:24:53 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x1ff) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) connect$rose(r4, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, 0x0) 03:24:53 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 03:24:53 executing program 4: bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x5, 0x0, 0x2d}, 0x10) 03:24:53 executing program 1: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x4302) 03:24:53 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x114, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:53 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x1ff) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) connect$rose(r4, 0x0, 0x0) 03:24:53 executing program 4: bind$xdp(0xffffffffffffffff, 0x0, 0x0) 03:24:53 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x1ff) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) 03:24:53 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) 03:24:53 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:53 executing program 1: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x4302) 03:24:53 executing program 4: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x114, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:53 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x1ff) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) 03:24:53 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) 03:24:54 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:54 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x1ff) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 03:24:54 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 03:24:54 executing program 4: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x114, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:54 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x1ff) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 03:24:54 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) 03:24:54 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:54 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 03:24:54 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x1ff) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 03:24:54 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r2, 0x0, 0x0) 03:24:54 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x1ff) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 03:24:54 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) 03:24:54 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x114, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:54 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x1ff) 03:24:54 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 03:24:54 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r2, 0x0, 0x0) 03:24:54 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x1ff) 03:24:54 executing program 3: openat$sndtimer(0xffffffffffffff9c, 0x0, 0xc200) 03:24:54 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x114, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:54 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) 03:24:54 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r2, 0x0, 0x0) 03:24:54 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r2, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 03:24:54 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) 03:24:54 executing program 3: openat$sndtimer(0xffffffffffffff9c, 0x0, 0xc200) 03:24:54 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 03:24:54 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x114, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:54 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 03:24:54 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}, 0x0, 0x0, 0x300000000000000}) 03:24:55 executing program 3: openat$sndtimer(0xffffffffffffff9c, 0x0, 0xc200) 03:24:55 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$packet(0x11, 0x2, 0x300) 03:24:55 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x114, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:55 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x3ff}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r2, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0xffffffffffffffff, 0x3, 0x1, 0x2, 0x10000}}) 03:24:55 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 03:24:55 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x78c6, 0x0, 0x1}, 0x800, 0x3, 0x4}) 03:24:55 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) 03:24:55 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) socket$packet(0x11, 0x2, 0x300) 03:24:55 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x114, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:55 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$packet(0x11, 0x2, 0x300) 03:24:55 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) 03:24:55 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 03:24:55 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) 03:24:55 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) 03:24:55 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x114, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:55 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x2, 0x1, 0x0, 0x1}}) 03:24:55 executing program 1: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x114, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:55 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) 03:24:55 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) 03:24:55 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) 03:24:55 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:55 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xc200) 03:24:55 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x22002) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x80800) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x938, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r1}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa1dc}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x12}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1c0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1, 0x2, 0x7, 0x8001}, {0x8, 0x3c, 0x1}, {0x3, 0x0, 0x8, 0x7fff}, {0x7f, 0x5, 0x3f, 0x9}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x273}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x208, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9ad}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xcc8, 0x48, 0x6, 0x4}, {0x1, 0x20, 0x48, 0x7}, {0x7, 0x38, 0x7, 0x7}, {0x81, 0x20, 0x9, 0x8}, {0x1, 0xff, 0x5, 0x1f}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4109}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x53bb2a9e}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x938}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 03:24:55 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$rose(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) 03:24:55 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) socket$packet(0x11, 0x2, 0x300) 03:24:55 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x0, 0xffffffff, 0x0, 0x1}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 03:24:55 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x22002) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x80800) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x938, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r1}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa1dc}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x12}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1c0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1, 0x2, 0x7, 0x8001}, {0x8, 0x3c, 0x1}, {0x3, 0x0, 0x8, 0x7fff}, {0x7f, 0x5, 0x3f, 0x9}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x273}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x208, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9ad}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xcc8, 0x48, 0x6, 0x4}, {0x1, 0x20, 0x48, 0x7}, {0x7, 0x38, 0x7, 0x7}, {0x81, 0x20, 0x9, 0x8}, {0x1, 0xff, 0x5, 0x1f}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4109}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x53bb2a9e}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x938}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 03:24:55 executing program 4: openat$sndtimer(0xffffffffffffff9c, 0x0, 0xc200) 03:24:55 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:56 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) 03:24:56 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) socket$packet(0x11, 0x2, 0x300) 03:24:56 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40049409, &(0x7f0000000440)={{0x1}}) 03:24:56 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:56 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x22002) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x80800) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x938, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r1}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa1dc}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x12}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1c0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1, 0x2, 0x7, 0x8001}, {0x8, 0x3c, 0x1}, {0x3, 0x0, 0x8, 0x7fff}, {0x7f, 0x5, 0x3f, 0x9}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x273}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x208, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9ad}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xcc8, 0x48, 0x6, 0x4}, {0x1, 0x20, 0x48, 0x7}, {0x7, 0x38, 0x7, 0x7}, {0x81, 0x20, 0x9, 0x8}, {0x1, 0xff, 0x5, 0x1f}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4109}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x53bb2a9e}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x938}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 03:24:56 executing program 4: openat$sndtimer(0xffffffffffffff9c, 0x0, 0xc200) 03:24:56 executing program 2: socket$packet(0x11, 0x2, 0x300) 03:24:56 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) 03:24:56 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40049409, &(0x7f0000000440)={{0x1}}) 03:24:56 executing program 4: openat$sndtimer(0xffffffffffffff9c, 0x0, 0xc200) 03:24:56 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x22002) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x80800) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) 03:24:56 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:56 executing program 2: socket$packet(0x11, 0x0, 0x300) 03:24:56 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40049409, &(0x7f0000000440)={{0x1}}) 03:24:56 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) 03:24:56 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) 03:24:56 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:56 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x22002) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x80800) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) 03:24:56 executing program 2: socket$packet(0x11, 0x0, 0x300) 03:24:56 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) 03:24:56 executing program 3: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x40049409, &(0x7f0000000440)={{0x1}}) 03:24:56 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:56 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) 03:24:56 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x22002) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x80800) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) 03:24:56 executing program 2: socket$packet(0x11, 0x0, 0x300) 03:24:56 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) 03:24:56 executing program 3: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x40049409, &(0x7f0000000440)={{0x1}}) 03:24:56 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) 03:24:56 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:56 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x22002) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x80800) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) 03:24:56 executing program 2: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:56 executing program 4: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:56 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) 03:24:57 executing program 3: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x40049409, &(0x7f0000000440)={{0x1}}) 03:24:57 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:57 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1}}) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) 03:24:57 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x22002) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x80800) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) 03:24:57 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) 03:24:57 executing program 4: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:57 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40049409, &(0x7f0000000440)={{0x1}}) 03:24:57 executing program 5: socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 03:24:57 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x22002) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x80800) 03:24:57 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x400454ca, &(0x7f0000000440)={{0x1}}) 03:24:57 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x6) 03:24:57 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40045402, &(0x7f0000000440)={{0x1}}) 03:24:57 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40049409, &(0x7f0000000440)={{0x1}}) 03:24:57 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40049409, &(0x7f0000000440)={{0x1}}) 03:24:57 executing program 5: socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 03:24:57 executing program 1: accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x80800) 03:24:57 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x6) 03:24:57 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5452, &(0x7f0000000440)={{0x1, 0x0, 0x0, 0x0, 0x1}}) 03:24:57 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40049409, &(0x7f0000000440)={{0x1}}) 03:24:57 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x54a1, &(0x7f0000000440)={{0x1}}) 03:24:57 executing program 5: socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 03:24:57 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5452, &(0x7f0000000440)={{0x1, 0x0, 0x0, 0x0, 0x1}}) 03:24:57 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x6) 03:24:57 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800) 03:24:57 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x54a1, &(0x7f0000000440)={{0x1}}) 03:24:57 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x40049409, &(0x7f0000000440)={{0x1}}) 03:24:57 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 03:24:58 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5452, &(0x7f0000000440)={{0x1, 0x0, 0x0, 0x0, 0x1}}) 03:24:58 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80800) 03:24:58 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x40049409, &(0x7f0000000440)={{0x1}}) 03:24:58 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:58 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x54a1, &(0x7f0000000440)={{0x1}}) 03:24:58 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 03:24:58 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:24:58 executing program 2: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5452, &(0x7f0000000440)={{0x1, 0x0, 0x0, 0x0, 0x1}}) 03:24:58 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x40049409, &(0x7f0000000440)={{0x1}}) 03:24:58 executing program 4: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x54a1, &(0x7f0000000440)={{0x1}}) 03:24:58 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 03:24:58 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:58 executing program 2: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5452, &(0x7f0000000440)={{0x1, 0x0, 0x0, 0x0, 0x1}}) 03:24:58 executing program 1: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x6) 03:24:58 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40049409, 0x0) 03:24:58 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:58 executing program 4: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x54a1, &(0x7f0000000440)={{0x1}}) 03:24:58 executing program 2: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5452, &(0x7f0000000440)={{0x1, 0x0, 0x0, 0x0, 0x1}}) 03:24:58 executing program 5: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x820, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:58 executing program 1: ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000000)=""/239) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x3, 0x2, 0x5, 0x3, 0x2}}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x900, 0x0) connect$rose(r0, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x6, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast]}, 0x40) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x4, 0x50, r1, 0xb439b000) 03:24:58 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:58 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5452, &(0x7f0000000440)={{0x1, 0x0, 0x0, 0x0, 0x1}}) 03:24:58 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40049409, 0x0) 03:24:58 executing program 4: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x54a1, &(0x7f0000000440)={{0x1}}) 03:24:58 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5460, &(0x7f0000000440)={{0x1}}) 03:24:58 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5452, &(0x7f0000000440)={{0x1}}) 03:24:58 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5452, &(0x7f0000000440)={{0x1, 0x0, 0x0, 0x0, 0x1}}) 03:24:58 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x54a1, &(0x7f0000000440)={{0x1}}) 03:24:58 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:58 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40049409, 0x0) 03:24:58 executing program 5: ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000000)=""/239) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x3, 0x2, 0x5, 0x3, 0x2}}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x900, 0x0) connect$rose(r0, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x6, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast]}, 0x40) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x4, 0x50, r1, 0xb439b000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x4, 0x40, 0x2, 0x81, 0x2, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x8000, 0x0, 0x6}}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000300)={{0x2, 0x1, 0x0, 0x0, 0xe1}, 0x800, 0x4}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000380)=0x14004, 0x4) 03:24:58 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5452, &(0x7f0000000440)={{0x1, 0x0, 0x0, 0x0, 0x1}}) 03:24:58 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5460, &(0x7f0000000440)={{0x1}}) 03:24:59 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40049409, &(0x7f0000000440)) 03:24:59 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x54a1, &(0x7f0000000440)={{0x1}}) 03:24:59 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:59 executing program 5: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:59 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5452, &(0x7f0000000440)={{0x1, 0x0, 0x0, 0x0, 0x1}}) 03:24:59 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5460, &(0x7f0000000440)={{0x1}}) 03:24:59 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5450, &(0x7f0000000440)={{0x1}}) 03:24:59 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:59 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x54a1, &(0x7f0000000440)={{0x1}}) 03:24:59 executing program 1: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5460, &(0x7f0000000440)={{0x1}}) 03:24:59 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5452, &(0x7f0000000440)={{0x1, 0x0, 0x0, 0x0, 0x1}}) 03:24:59 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5423, &(0x7f0000000440)={{0x1}}) 03:24:59 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5450, &(0x7f0000000440)={{0x1}}) 03:24:59 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x54a1, &(0x7f0000000440)={{0x1}}) 03:24:59 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:59 executing program 1: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5460, &(0x7f0000000440)={{0x1}}) 03:24:59 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5452, &(0x7f0000000440)={{0x1, 0x0, 0x0, 0x0, 0x1}}) 03:24:59 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5423, &(0x7f0000000440)={{0x1}}) 03:24:59 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x54a1, &(0x7f0000000440)={{0x1}}) 03:24:59 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5450, &(0x7f0000000440)={{0x1}}) 03:24:59 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:59 executing program 1: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5460, &(0x7f0000000440)={{0x1}}) 03:24:59 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x54a1, &(0x7f0000000440)={{0x1}}) 03:24:59 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5452, 0x0) 03:24:59 executing program 3: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5450, &(0x7f0000000440)={{0x1}}) 03:24:59 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5423, &(0x7f0000000440)={{0x1}}) 03:24:59 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5460, &(0x7f0000000440)={{0x1}}) 03:24:59 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:59 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5452, 0x0) 03:24:59 executing program 3: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5450, &(0x7f0000000440)={{0x1}}) 03:24:59 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x54a1, 0x0) 03:24:59 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5423, &(0x7f0000000440)={{0x1}}) 03:24:59 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5460, &(0x7f0000000440)={{0x1}}) 03:24:59 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:24:59 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5452, 0x0) 03:24:59 executing program 3: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5450, &(0x7f0000000440)={{0x1}}) 03:24:59 executing program 4: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:25:00 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5423, &(0x7f0000000440)={{0x1}}) 03:25:00 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5460, &(0x7f0000000440)={{0x1}}) 03:25:00 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:25:00 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5450, &(0x7f0000000440)={{0x1}}) 03:25:00 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5452, &(0x7f0000000440)={{0x0, 0x0, 0x0, 0x0, 0x1}}) 03:25:00 executing program 4: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:25:00 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5460, &(0x7f0000000440)={{0x1}}) 03:25:00 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5423, &(0x7f0000000440)={{0x1}}) 03:25:00 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5450, &(0x7f0000000440)={{0x1}}) 03:25:00 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5452, &(0x7f0000000440)={{0x0, 0x0, 0x0, 0x0, 0x1}}) 03:25:00 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x0, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:25:00 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5452, &(0x7f0000000440)={{0x0, 0x0, 0x0, 0x0, 0x1}}) 03:25:00 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5460, &(0x7f0000000440)={{0x1}}) 03:25:00 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5423, &(0x7f0000000440)={{0x1}}) 03:25:00 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5450, &(0x7f0000000440)={{0x1}}) 03:25:00 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5452, &(0x7f0000000440)={{0x0, 0x0, 0x0, 0x0, 0x1}}) 03:25:00 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x0, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:25:00 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5423, &(0x7f0000000440)={{0x1}}) 03:25:00 executing program 4: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:25:00 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5460, &(0x7f0000000440)={{0x1}}) 03:25:00 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5450, &(0x7f0000000440)={{0x1}}) 03:25:00 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5452, &(0x7f0000000440)={{0x1}}) 03:25:00 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5423, &(0x7f0000000440)={{0x1}}) 03:25:00 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x0, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:25:00 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5422, &(0x7f0000000440)={{0x1}}) 03:25:00 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5460, 0x0) 03:25:00 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5420, &(0x7f0000000440)={{0x1}}) 03:25:00 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5423, &(0x7f0000000440)={{0x1}}) 03:25:00 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x541b, &(0x7f0000000440)={{0x1}}) 03:25:00 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5422, &(0x7f0000000440)={{0x1}}) 03:25:00 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5450, &(0x7f0000000440)={{0x1}}) 03:25:00 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x70bd2d, 0x0, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:25:00 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x70bd2d, 0x0, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:25:00 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5420, &(0x7f0000000440)={{0x1}}) 03:25:00 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5422, &(0x7f0000000440)={{0x1}}) 03:25:01 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x541b, &(0x7f0000000440)={{0x1}}) 03:25:01 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5423, &(0x7f0000000440)={{0x1}}) 03:25:01 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5450, &(0x7f0000000440)={{0x1}}) 03:25:01 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5420, &(0x7f0000000440)={{0x1}}) 03:25:01 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x70bd2d, 0x0, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:25:01 executing program 4: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5422, &(0x7f0000000440)={{0x1}}) 03:25:01 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x541b, &(0x7f0000000440)={{0x1}}) 03:25:01 executing program 4: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5422, &(0x7f0000000440)={{0x1}}) 03:25:01 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5450, 0x0) 03:25:01 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5423, &(0x7f0000000440)={{0x1}}) 03:25:01 executing program 2: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5420, &(0x7f0000000440)={{0x1}}) 03:25:01 executing program 1: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x541b, &(0x7f0000000440)={{0x1}}) 03:25:01 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:25:01 executing program 4: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5422, &(0x7f0000000440)={{0x1}}) 03:25:01 executing program 2: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5420, &(0x7f0000000440)={{0x1}}) 03:25:01 executing program 1: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x541b, &(0x7f0000000440)={{0x1}}) 03:25:01 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5450, 0x0) 03:25:01 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5423, 0x0) 03:25:01 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:25:01 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5422, &(0x7f0000000440)={{0x1}}) 03:25:01 executing program 2: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5420, &(0x7f0000000440)={{0x1}}) 03:25:01 executing program 1: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x541b, &(0x7f0000000440)={{0x1}}) 03:25:01 executing program 5: ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000000)=""/239) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x3, 0x2, 0x5, 0x3, 0x2}}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x900, 0x0) connect$rose(r0, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x6, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast]}, 0x40) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x4, 0x50, r1, 0xb439b000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x4, 0x40, 0x2, 0x81, 0x2, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x8000, 0x0, 0x6}}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000300)={{0x2, 0x1, 0x0, 0x0, 0xe1}, 0x800, 0x4}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000380)=0x14004, 0x4) socket$l2tp(0x2, 0x2, 0x73) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x52, 0x1, 0x978, {0x9, 0x81}, {0x3f, 0x1}, @ramp={0x3, 0x5, {0x4e3a, 0x4, 0x8001, 0x600}}}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000440)={{0x1, 0x1, 0xff, 0x2, 0x1}, 0x6, 0x6, 0x4e}) 03:25:01 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5422, &(0x7f0000000440)={{0x1}}) 03:25:01 executing program 3: ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000000)=""/239) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x3, 0x2, 0x5, 0x3, 0x2}}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x900, 0x0) connect$rose(r0, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x6, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast]}, 0x40) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 03:25:01 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:25:01 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x541b, &(0x7f0000000440)={{0x1}}) 03:25:01 executing program 5: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:25:01 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5422, &(0x7f0000000440)={{0x1}}) 03:25:01 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5420, &(0x7f0000000440)={{0x1}}) 03:25:01 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x10, &(0x7f0000000440)={{0x1}}) 03:25:01 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:25:01 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x541b, &(0x7f0000000440)={{0x1}}) 03:25:01 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x2, &(0x7f0000000440)={{0x1}}) 03:25:01 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5422, &(0x7f0000000440)={{0x1}}) 03:25:01 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5420, &(0x7f0000000440)={{0x1}}) 03:25:01 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x10, &(0x7f0000000440)={{0x1}}) 03:25:02 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x541b, &(0x7f0000000440)={{0x1}}) 03:25:02 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:25:02 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x2, &(0x7f0000000440)={{0x1}}) 03:25:02 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5420, &(0x7f0000000440)={{0x1}}) 03:25:02 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x10, &(0x7f0000000440)={{0x1}}) 03:25:02 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5422, &(0x7f0000000440)={{0x1}}) 03:25:02 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x541b, &(0x7f0000000440)={{0x1}}) 03:25:02 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:25:02 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x2, &(0x7f0000000440)={{0x1}}) 03:25:02 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5420, &(0x7f0000000440)={{0x1}}) 03:25:02 executing program 3: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x10, &(0x7f0000000440)={{0x1}}) 03:25:02 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5422, &(0x7f0000000440)={{0x1}}) 03:25:02 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x541b, &(0x7f0000000440)={{0x1}}) 03:25:02 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:25:02 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x2, &(0x7f0000000440)={{0x1}}) 03:25:02 executing program 3: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x10, &(0x7f0000000440)={{0x1}}) 03:25:02 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5420, &(0x7f0000000440)={{0x1}}) 03:25:02 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5422, 0x0) 03:25:02 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:25:02 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x541b, &(0x7f0000000440)={{0x1}}) 03:25:02 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x2, &(0x7f0000000440)={{0x1}}) 03:25:02 executing program 3: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x10, &(0x7f0000000440)={{0x1}}) 03:25:02 executing program 4 (fault-call:1 fault-nth:0): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5422, 0x0) 03:25:02 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x5420, &(0x7f0000000440)={{0x1}}) 03:25:02 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x541b, 0x0) 03:25:02 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x2, &(0x7f0000000440)={{0x1}}) 03:25:02 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5420, 0x0) 03:25:02 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x6) [ 641.904974][T20917] FAULT_INJECTION: forcing a failure. [ 641.904974][T20917] name failslab, interval 1, probability 0, space 0, times 0 [ 641.978360][T20917] CPU: 1 PID: 20917 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 641.987081][T20917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 641.997136][T20917] Call Trace: [ 642.000512][T20917] dump_stack+0x141/0x1d7 [ 642.004940][T20917] should_fail.cold+0x5/0xa [ 642.009458][T20917] ? tomoyo_realpath_from_path+0xc3/0x620 [ 642.015179][T20917] should_failslab+0x5/0x10 [ 642.019689][T20917] __kmalloc+0x72/0x300 [ 642.023857][T20917] tomoyo_realpath_from_path+0xc3/0x620 [ 642.029408][T20917] ? tomoyo_profile+0x42/0x50 [ 642.034092][T20917] tomoyo_path_number_perm+0x1d5/0x590 [ 642.039555][T20917] ? tomoyo_path_number_perm+0x18d/0x590 [ 642.045197][T20917] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 642.051040][T20917] ? lock_downgrade+0x6e0/0x6e0 [ 642.055908][T20917] ? __fget_files+0x288/0x3d0 [ 642.060595][T20917] security_file_ioctl+0x50/0xb0 [ 642.065541][T20917] __x64_sys_ioctl+0xb3/0x200 [ 642.070226][T20917] do_syscall_64+0x3a/0xb0 [ 642.074647][T20917] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 642.080546][T20917] RIP: 0033:0x4665f9 [ 642.084438][T20917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 642.104220][T20917] RSP: 002b:00007fc7d358f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 642.112644][T20917] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 642.120630][T20917] RDX: 0000000000000000 RSI: 0000000000005422 RDI: 0000000000000003 [ 642.128606][T20917] RBP: 00007fc7d358f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 642.136576][T20917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.144545][T20917] R13: 00007ffcfae97e7f R14: 00007fc7d358f300 R15: 0000000000022000 03:25:03 executing program 2 (fault-call:1 fault-nth:0): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5420, 0x0) 03:25:03 executing program 1 (fault-call:1 fault-nth:0): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x541b, 0x0) 03:25:03 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x10, &(0x7f0000000440)={{0x1}}) 03:25:03 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x10, &(0x7f0000000440)={{0x1}}) 03:25:03 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:25:03 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x2, &(0x7f0000000440)={{0x1}}) [ 642.226235][T20917] ERROR: Out of memory at tomoyo_realpath_from_path. [ 642.259157][T20938] FAULT_INJECTION: forcing a failure. [ 642.259157][T20938] name failslab, interval 1, probability 0, space 0, times 0 [ 642.260368][T20937] FAULT_INJECTION: forcing a failure. [ 642.260368][T20937] name failslab, interval 1, probability 0, space 0, times 0 [ 642.323468][T20938] CPU: 1 PID: 20938 Comm: syz-executor.1 Not tainted 5.12.0-syzkaller #0 [ 642.332019][T20938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 642.342072][T20938] Call Trace: [ 642.345350][T20938] dump_stack+0x141/0x1d7 [ 642.349689][T20938] should_fail.cold+0x5/0xa [ 642.354201][T20938] ? tomoyo_realpath_from_path+0xc3/0x620 [ 642.359928][T20938] should_failslab+0x5/0x10 [ 642.364438][T20938] __kmalloc+0x72/0x300 [ 642.368601][T20938] tomoyo_realpath_from_path+0xc3/0x620 [ 642.374156][T20938] ? tomoyo_profile+0x42/0x50 [ 642.378839][T20938] tomoyo_path_number_perm+0x1d5/0x590 [ 642.384306][T20938] ? tomoyo_path_number_perm+0x18d/0x590 [ 642.389946][T20938] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 642.395779][T20938] ? lock_downgrade+0x6e0/0x6e0 [ 642.400647][T20938] ? __fget_files+0x288/0x3d0 [ 642.405336][T20938] security_file_ioctl+0x50/0xb0 [ 642.410274][T20938] __x64_sys_ioctl+0xb3/0x200 [ 642.414961][T20938] do_syscall_64+0x3a/0xb0 [ 642.419386][T20938] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 642.425284][T20938] RIP: 0033:0x4665f9 [ 642.429176][T20938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 642.448784][T20938] RSP: 002b:00007f02946f3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 642.457203][T20938] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 642.465172][T20938] RDX: 0000000000000000 RSI: 000000000000541b RDI: 0000000000000003 [ 642.473134][T20938] RBP: 00007f02946f31d0 R08: 0000000000000000 R09: 0000000000000000 [ 642.481105][T20938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.489071][T20938] R13: 00007ffd40465daf R14: 00007f02946f3300 R15: 0000000000022000 [ 642.497468][T20937] CPU: 0 PID: 20937 Comm: syz-executor.2 Not tainted 5.12.0-syzkaller #0 [ 642.505900][T20937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 642.515949][T20937] Call Trace: [ 642.519224][T20937] dump_stack+0x141/0x1d7 [ 642.523563][T20937] should_fail.cold+0x5/0xa [ 642.528078][T20937] ? tomoyo_realpath_from_path+0xc3/0x620 [ 642.533805][T20937] should_failslab+0x5/0x10 [ 642.538214][T20938] ERROR: Out of memory at tomoyo_realpath_from_path. [ 642.538313][T20937] __kmalloc+0x72/0x300 [ 642.549106][T20937] tomoyo_realpath_from_path+0xc3/0x620 [ 642.554661][T20937] ? tomoyo_profile+0x42/0x50 [ 642.559346][T20937] tomoyo_path_number_perm+0x1d5/0x590 [ 642.564812][T20937] ? tomoyo_path_number_perm+0x18d/0x590 [ 642.570453][T20937] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 642.576293][T20937] ? lock_downgrade+0x6e0/0x6e0 [ 642.581163][T20937] ? __fget_files+0x288/0x3d0 [ 642.585851][T20937] security_file_ioctl+0x50/0xb0 [ 642.590793][T20937] __x64_sys_ioctl+0xb3/0x200 [ 642.595479][T20937] do_syscall_64+0x3a/0xb0 [ 642.599899][T20937] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 642.605815][T20937] RIP: 0033:0x4665f9 [ 642.609721][T20937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 642.629334][T20937] RSP: 002b:00007f648f1a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 642.637749][T20937] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 642.645717][T20937] RDX: 0000000000000000 RSI: 0000000000005420 RDI: 0000000000000003 [ 642.653694][T20937] RBP: 00007f648f1a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 642.661664][T20937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 03:25:03 executing program 4 (fault-call:1 fault-nth:1): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5422, 0x0) 03:25:03 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:25:03 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x2, &(0x7f0000000440)={{0x1}}) 03:25:03 executing program 1 (fault-call:1 fault-nth:1): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x541b, 0x0) [ 642.669642][T20937] R13: 00007ffe016a266f R14: 00007f648f1a2300 R15: 0000000000022000 03:25:03 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x2, &(0x7f0000000440)={{0x1}}) 03:25:03 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x10, &(0x7f0000000440)={{0x1}}) [ 642.729138][T20937] ERROR: Out of memory at tomoyo_realpath_from_path. 03:25:03 executing program 2 (fault-call:1 fault-nth:1): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5420, 0x0) [ 642.815637][T20952] FAULT_INJECTION: forcing a failure. [ 642.815637][T20952] name failslab, interval 1, probability 0, space 0, times 0 [ 642.826401][T20955] FAULT_INJECTION: forcing a failure. [ 642.826401][T20955] name failslab, interval 1, probability 0, space 0, times 0 03:25:03 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x6) [ 642.870510][T20955] CPU: 1 PID: 20955 Comm: syz-executor.1 Not tainted 5.12.0-syzkaller #0 [ 642.879556][T20955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 642.889709][T20955] Call Trace: [ 642.892985][T20955] dump_stack+0x141/0x1d7 [ 642.897338][T20955] should_fail.cold+0x5/0xa [ 642.901857][T20955] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 642.907236][T20955] should_failslab+0x5/0x10 [ 642.911748][T20955] __kmalloc+0x72/0x300 [ 642.915911][T20955] tomoyo_encode2.part.0+0xe9/0x3a0 [ 642.921119][T20955] tomoyo_encode+0x28/0x50 [ 642.925539][T20955] tomoyo_realpath_from_path+0x186/0x620 [ 642.931183][T20955] tomoyo_path_number_perm+0x1d5/0x590 [ 642.936646][T20955] ? tomoyo_path_number_perm+0x18d/0x590 [ 642.942284][T20955] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 642.948209][T20955] ? lock_downgrade+0x6e0/0x6e0 [ 642.953077][T20955] ? __fget_files+0x288/0x3d0 [ 642.957767][T20955] security_file_ioctl+0x50/0xb0 [ 642.962709][T20955] __x64_sys_ioctl+0xb3/0x200 [ 642.967387][T20955] do_syscall_64+0x3a/0xb0 [ 642.971826][T20955] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 642.977721][T20955] RIP: 0033:0x4665f9 [ 642.981611][T20955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 643.001220][T20955] RSP: 002b:00007f02946f3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 643.009713][T20955] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 643.017696][T20955] RDX: 0000000000000000 RSI: 000000000000541b RDI: 0000000000000003 [ 643.025667][T20955] RBP: 00007f02946f31d0 R08: 0000000000000000 R09: 0000000000000000 [ 643.033636][T20955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.041600][T20955] R13: 00007ffd40465daf R14: 00007f02946f3300 R15: 0000000000022000 [ 643.049584][T20952] CPU: 0 PID: 20952 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 643.058006][T20952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 643.068058][T20952] Call Trace: [ 643.071338][T20952] dump_stack+0x141/0x1d7 [ 643.075676][T20952] should_fail.cold+0x5/0xa [ 643.080190][T20952] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 643.085570][T20952] should_failslab+0x5/0x10 [ 643.090079][T20952] __kmalloc+0x72/0x300 [ 643.094243][T20952] tomoyo_encode2.part.0+0xe9/0x3a0 [ 643.099459][T20952] tomoyo_encode+0x28/0x50 [ 643.103889][T20952] tomoyo_realpath_from_path+0x186/0x620 [ 643.106277][T20962] FAULT_INJECTION: forcing a failure. [ 643.106277][T20962] name failslab, interval 1, probability 0, space 0, times 0 [ 643.109537][T20952] tomoyo_path_number_perm+0x1d5/0x590 [ 643.109571][T20952] ? tomoyo_path_number_perm+0x18d/0x590 [ 643.133180][T20952] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 643.139010][T20952] ? lock_downgrade+0x6e0/0x6e0 [ 643.144041][T20952] ? __fget_files+0x288/0x3d0 [ 643.148724][T20952] security_file_ioctl+0x50/0xb0 [ 643.153664][T20952] __x64_sys_ioctl+0xb3/0x200 [ 643.158346][T20952] do_syscall_64+0x3a/0xb0 [ 643.162764][T20952] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 643.168657][T20952] RIP: 0033:0x4665f9 [ 643.172558][T20952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 643.192626][T20952] RSP: 002b:00007fc7d358f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 643.201042][T20952] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 643.209097][T20952] RDX: 0000000000000000 RSI: 0000000000005422 RDI: 0000000000000003 [ 643.217146][T20952] RBP: 00007fc7d358f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 643.225110][T20952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.233082][T20952] R13: 00007ffcfae97e7f R14: 00007fc7d358f300 R15: 0000000000022000 [ 643.241056][T20962] CPU: 1 PID: 20962 Comm: syz-executor.2 Not tainted 5.12.0-syzkaller #0 [ 643.249477][T20962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 643.259518][T20962] Call Trace: [ 643.262784][T20962] dump_stack+0x141/0x1d7 [ 643.267106][T20962] should_fail.cold+0x5/0xa [ 643.271603][T20962] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 643.276965][T20962] should_failslab+0x5/0x10 [ 643.281457][T20962] __kmalloc+0x72/0x300 [ 643.285604][T20962] tomoyo_encode2.part.0+0xe9/0x3a0 [ 643.290796][T20962] tomoyo_encode+0x28/0x50 [ 643.295218][T20962] tomoyo_realpath_from_path+0x186/0x620 [ 643.300851][T20962] tomoyo_path_number_perm+0x1d5/0x590 [ 643.306301][T20962] ? tomoyo_path_number_perm+0x18d/0x590 [ 643.311925][T20962] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 643.317742][T20962] ? lock_downgrade+0x6e0/0x6e0 [ 643.322592][T20962] ? __fget_files+0x288/0x3d0 [ 643.327262][T20962] security_file_ioctl+0x50/0xb0 [ 643.332189][T20962] __x64_sys_ioctl+0xb3/0x200 [ 643.336856][T20962] do_syscall_64+0x3a/0xb0 [ 643.341261][T20962] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 643.347146][T20962] RIP: 0033:0x4665f9 [ 643.351026][T20962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:25:04 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x2, &(0x7f0000000440)={{0x1}}) 03:25:04 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x10, &(0x7f0000000440)={{0x1}}) [ 643.370628][T20962] RSP: 002b:00007f648f1a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 643.379049][T20962] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 643.387011][T20962] RDX: 0000000000000000 RSI: 0000000000005420 RDI: 0000000000000003 [ 643.394973][T20962] RBP: 00007f648f1a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 643.402927][T20962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.410884][T20962] R13: 00007ffe016a266f R14: 00007f648f1a2300 R15: 0000000000022000 03:25:04 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x10, &(0x7f0000000440)={{0x1}}) 03:25:04 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x10, &(0x7f0000000440)={{0x1}}) [ 643.543241][T20955] ERROR: Out of memory at tomoyo_realpath_from_path. [ 643.573771][T20962] ERROR: Out of memory at tomoyo_realpath_from_path. [ 643.580804][T20952] ERROR: Out of memory at tomoyo_realpath_from_path. 03:25:04 executing program 4 (fault-call:1 fault-nth:2): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5422, 0x0) 03:25:04 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}}, 0x6) 03:25:04 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x2, &(0x7f0000000440)={{0x1}}) 03:25:04 executing program 1 (fault-call:1 fault-nth:2): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x541b, 0x0) 03:25:04 executing program 2 (fault-call:1 fault-nth:2): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5420, 0x0) 03:25:04 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x10, 0x0) [ 643.692909][T20980] FAULT_INJECTION: forcing a failure. [ 643.692909][T20980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 643.723913][T20982] FAULT_INJECTION: forcing a failure. [ 643.723913][T20982] name fail_usercopy, interval 1, probability 0, space 0, times 0 03:25:04 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x2, &(0x7f0000000440)={{0x1}}) [ 643.742993][T20980] CPU: 1 PID: 20980 Comm: syz-executor.1 Not tainted 5.12.0-syzkaller #0 [ 643.751500][T20980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 643.761555][T20980] Call Trace: [ 643.764829][T20980] dump_stack+0x141/0x1d7 [ 643.769167][T20980] should_fail.cold+0x5/0xa [ 643.773677][T20980] _copy_to_user+0x2c/0x150 [ 643.778189][T20980] simple_read_from_buffer+0xcc/0x160 [ 643.783574][T20980] proc_fail_nth_read+0x187/0x220 [ 643.788603][T20980] ? proc_exe_link+0x1d0/0x1d0 [ 643.793366][T20980] ? security_file_permission+0x248/0x560 [ 643.799103][T20980] ? proc_exe_link+0x1d0/0x1d0 [ 643.803869][T20980] vfs_read+0x1b5/0x570 [ 643.808036][T20980] ksys_read+0x12d/0x250 [ 643.812289][T20980] ? vfs_write+0xa30/0xa30 [ 643.816716][T20980] ? syscall_enter_from_user_mode+0x27/0x70 [ 643.822622][T20980] do_syscall_64+0x3a/0xb0 [ 643.827040][T20980] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 643.832949][T20980] RIP: 0033:0x41937c 03:25:04 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x2, 0x0) [ 643.836856][T20980] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 643.856477][T20980] RSP: 002b:00007f02946f3170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 643.864898][T20980] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041937c [ 643.872870][T20980] RDX: 000000000000000f RSI: 00007f02946f31e0 RDI: 0000000000000004 [ 643.880842][T20980] RBP: 00007f02946f31d0 R08: 0000000000000000 R09: 0000000000000000 [ 643.888812][T20980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.896779][T20980] R13: 00007ffd40465daf R14: 00007f02946f3300 R15: 0000000000022000 [ 643.942796][T20982] CPU: 1 PID: 20982 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 643.951496][T20982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 643.961548][T20982] Call Trace: [ 643.964822][T20982] dump_stack+0x141/0x1d7 [ 643.969149][T20982] should_fail.cold+0x5/0xa [ 643.973678][T20982] _copy_to_user+0x2c/0x150 [ 643.978171][T20982] simple_read_from_buffer+0xcc/0x160 [ 643.983714][T20982] proc_fail_nth_read+0x187/0x220 [ 643.988725][T20982] ? proc_exe_link+0x1d0/0x1d0 [ 643.993475][T20982] ? security_file_permission+0x248/0x560 [ 643.999190][T20982] ? proc_exe_link+0x1d0/0x1d0 [ 644.003938][T20982] vfs_read+0x1b5/0x570 [ 644.008089][T20982] ksys_read+0x12d/0x250 [ 644.012328][T20982] ? vfs_write+0xa30/0xa30 [ 644.016755][T20982] ? syscall_enter_from_user_mode+0x27/0x70 [ 644.022645][T20982] do_syscall_64+0x3a/0xb0 [ 644.027052][T20982] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 644.033123][T20982] RIP: 0033:0x41937c [ 644.037089][T20982] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 644.056688][T20982] RSP: 002b:00007fc7d358f170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 644.065092][T20982] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041937c [ 644.073049][T20982] RDX: 000000000000000f RSI: 00007fc7d358f1e0 RDI: 0000000000000004 [ 644.081003][T20982] RBP: 00007fc7d358f1d0 R08: 0000000000000000 R09: 0000000000000000 03:25:04 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}}, 0x6) 03:25:05 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x2, 0x0) [ 644.088960][T20982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.096917][T20982] R13: 00007ffcfae97e7f R14: 00007fc7d358f300 R15: 0000000000022000 03:25:05 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5420, 0x0) 03:25:05 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5422, 0x0) 03:25:05 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x541b, 0x0) 03:25:05 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x10, 0x0) 03:25:05 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x2, 0x0) 03:25:05 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x2, 0x0) 03:25:05 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}}, 0x6) 03:25:05 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x2, 0x0) 03:25:05 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x2, 0x0) 03:25:05 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x2, 0x0) 03:25:05 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 03:25:05 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x10, 0x0) 03:25:05 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x10, 0x0) 03:25:05 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x2, &(0x7f0000000440)) 03:25:05 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x2, 0x0) 03:25:05 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x10, 0x0) 03:25:05 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x720, 0x0) 03:25:05 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 03:25:05 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x4c01, 0x0) 03:25:05 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x4c01, 0x0) 03:25:05 executing program 5: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 03:25:05 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x2, 0x0) 03:25:05 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x4c01, 0x0) 03:25:05 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 03:25:05 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5420, 0x0) 03:25:05 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x541b, 0x0) 03:25:05 executing program 5: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 03:25:05 executing program 3: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x2, 0x0) 03:25:05 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x541b, 0x0) 03:25:05 executing program 0: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 03:25:05 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5421, 0x0) 03:25:06 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5420, 0x0) 03:25:06 executing program 5: socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}}, 0x6) 03:25:06 executing program 3: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x2, 0x0) 03:25:06 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5421, 0x0) 03:25:06 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5422, 0x0) 03:25:06 executing program 0 (fault-call:5 fault-nth:0): socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:25:06 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5421, 0x0) 03:25:06 executing program 5 (fault-call:1 fault-nth:0): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x2, &(0x7f0000000440)) 03:25:06 executing program 3: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x2, 0x0) 03:25:06 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5422, 0x0) 03:25:06 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5423, 0x0) [ 645.410650][T21078] FAULT_INJECTION: forcing a failure. [ 645.410650][T21078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.465559][T21083] FAULT_INJECTION: forcing a failure. [ 645.465559][T21083] name failslab, interval 1, probability 0, space 0, times 0 [ 645.478286][T21078] CPU: 1 PID: 21078 Comm: syz-executor.0 Not tainted 5.12.0-syzkaller #0 [ 645.486754][T21078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 645.496805][T21078] Call Trace: [ 645.500079][T21078] dump_stack+0x141/0x1d7 [ 645.504417][T21078] should_fail.cold+0x5/0xa [ 645.508931][T21078] _copy_from_user+0x2c/0x180 [ 645.513613][T21078] io_uring_setup+0x91/0x2a80 [ 645.518299][T21078] ? __context_tracking_exit+0xb8/0xe0 [ 645.523768][T21078] ? io_connect+0x680/0x680 [ 645.528272][T21078] ? lock_downgrade+0x6e0/0x6e0 [ 645.533140][T21078] ? syscall_enter_from_user_mode+0x27/0x70 [ 645.539051][T21078] do_syscall_64+0x3a/0xb0 [ 645.543472][T21078] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 645.549548][T21078] RIP: 0033:0x4665f9 [ 645.553442][T21078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 645.573221][T21078] RSP: 002b:00007f5774a9b108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 645.581638][T21078] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 645.589608][T21078] RDX: 0000000020ffa000 RSI: 0000000020000100 RDI: 00000000000020a0 [ 645.597604][T21078] RBP: 0000000020000100 R08: 0000000020000200 R09: 0000000020000200 [ 645.605580][T21078] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000200 03:25:06 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x2, 0x0) 03:25:06 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x2, 0x0) [ 645.613549][T21078] R13: 0000000020ffa000 R14: 00000000200001c0 R15: 0000000020ffa000 [ 645.621529][T21083] CPU: 0 PID: 21083 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 645.629949][T21083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 645.640005][T21083] Call Trace: [ 645.643284][T21083] dump_stack+0x141/0x1d7 [ 645.647626][T21083] should_fail.cold+0x5/0xa [ 645.652140][T21083] ? tomoyo_realpath_from_path+0xc3/0x620 [ 645.657869][T21083] should_failslab+0x5/0x10 [ 645.662379][T21083] __kmalloc+0x72/0x300 [ 645.666544][T21083] tomoyo_realpath_from_path+0xc3/0x620 [ 645.672103][T21083] ? tomoyo_profile+0x42/0x50 [ 645.676785][T21083] tomoyo_path_number_perm+0x1d5/0x590 [ 645.682247][T21083] ? tomoyo_path_number_perm+0x18d/0x590 [ 645.687888][T21083] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 645.693730][T21083] ? lock_downgrade+0x6e0/0x6e0 [ 645.698600][T21083] ? __fget_files+0x288/0x3d0 [ 645.703287][T21083] security_file_ioctl+0x50/0xb0 [ 645.708229][T21083] __x64_sys_ioctl+0xb3/0x200 03:25:06 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5423, 0x0) 03:25:06 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5423, 0x0) [ 645.712919][T21083] do_syscall_64+0x3a/0xb0 [ 645.717342][T21083] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 645.723245][T21083] RIP: 0033:0x4665f9 [ 645.727140][T21083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 645.746772][T21083] RSP: 002b:00007f8658f5b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 645.755189][T21083] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 03:25:06 executing program 0 (fault-call:5 fault-nth:1): socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) [ 645.763346][T21083] RDX: 0000000020000440 RSI: 0000000000000002 RDI: 0000000000000003 [ 645.771319][T21083] RBP: 00007f8658f5b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 645.779290][T21083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.787261][T21083] R13: 00007fff9788c8ff R14: 00007f8658f5b300 R15: 0000000000022000 03:25:06 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5450, 0x0) 03:25:06 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x2, 0x0) 03:25:06 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5425, 0x0) [ 645.868708][T21099] FAULT_INJECTION: forcing a failure. [ 645.868708][T21099] name failslab, interval 1, probability 0, space 0, times 0 [ 645.906265][T21099] CPU: 0 PID: 21099 Comm: syz-executor.0 Not tainted 5.12.0-syzkaller #0 [ 645.914790][T21099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 645.924842][T21099] Call Trace: [ 645.928117][T21099] dump_stack+0x141/0x1d7 [ 645.932457][T21099] should_fail.cold+0x5/0xa [ 645.936999][T21099] ? io_uring_setup+0x27d/0x2a80 [ 645.941938][T21099] should_failslab+0x5/0x10 [ 645.946446][T21099] kmem_cache_alloc_trace+0x55/0x290 [ 645.951741][T21099] io_uring_setup+0x27d/0x2a80 [ 645.956513][T21099] ? __context_tracking_exit+0xb8/0xe0 [ 645.962070][T21099] ? io_connect+0x680/0x680 [ 645.966616][T21099] ? syscall_enter_from_user_mode+0x27/0x70 [ 645.972519][T21099] do_syscall_64+0x3a/0xb0 [ 645.976936][T21099] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 645.982841][T21099] RIP: 0033:0x4665f9 [ 645.986734][T21099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 646.006349][T21099] RSP: 002b:00007f5774a9b108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 646.014967][T21099] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 646.022938][T21099] RDX: 0000000020ffa000 RSI: 0000000020000100 RDI: 00000000000020a0 [ 646.030997][T21099] RBP: 0000000020000100 R08: 0000000020000200 R09: 0000000020000200 [ 646.039056][T21099] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000200 [ 646.047027][T21099] R13: 0000000020ffa000 R14: 00000000200001c0 R15: 0000000020ffa000 [ 646.215476][T21083] ERROR: Out of memory at tomoyo_realpath_from_path. 03:25:07 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x542f, 0x0) 03:25:07 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5450, 0x0) 03:25:07 executing program 5 (fault-call:1 fault-nth:1): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x2, &(0x7f0000000440)) 03:25:07 executing program 0 (fault-call:5 fault-nth:2): socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:25:07 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5451, 0x0) 03:25:07 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x2, 0x0) [ 646.368237][T21119] FAULT_INJECTION: forcing a failure. [ 646.368237][T21119] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 646.403691][T21124] FAULT_INJECTION: forcing a failure. [ 646.403691][T21124] name failslab, interval 1, probability 0, space 0, times 0 [ 646.424569][T21119] CPU: 1 PID: 21119 Comm: syz-executor.0 Not tainted 5.12.0-syzkaller #0 [ 646.433175][T21119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 646.443320][T21119] Call Trace: [ 646.446593][T21119] dump_stack+0x141/0x1d7 [ 646.450931][T21119] should_fail.cold+0x5/0xa [ 646.455444][T21119] __alloc_pages_nodemask+0x189/0x730 [ 646.460828][T21119] ? __alloc_pages_slowpath.constprop.0+0x2270/0x2270 [ 646.467597][T21119] ? find_held_lock+0x2d/0x110 [ 646.472373][T21119] ? fs_reclaim_release+0x9c/0xe0 [ 646.477412][T21119] alloc_pages_current+0x18c/0x2a0 [ 646.482533][T21119] kmalloc_order+0x34/0xf0 [ 646.486958][T21119] kmalloc_order_trace+0x14/0x130 [ 646.491991][T21119] io_uring_setup+0x37e/0x2a80 [ 646.496765][T21119] ? __context_tracking_exit+0xb8/0xe0 [ 646.502231][T21119] ? io_connect+0x680/0x680 [ 646.506748][T21119] ? syscall_enter_from_user_mode+0x27/0x70 [ 646.512650][T21119] do_syscall_64+0x3a/0xb0 [ 646.517074][T21119] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 646.522976][T21119] RIP: 0033:0x4665f9 [ 646.526868][T21119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 646.546478][T21119] RSP: 002b:00007f5774a9b108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 646.554894][T21119] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 646.562864][T21119] RDX: 0000000020ffa000 RSI: 0000000020000100 RDI: 00000000000020a0 03:25:07 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5451, 0x0) 03:25:07 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5452, 0x0) 03:25:07 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5450, 0x0) [ 646.570833][T21119] RBP: 0000000020000100 R08: 0000000020000200 R09: 0000000020000200 [ 646.578805][T21119] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000200 [ 646.586773][T21119] R13: 0000000020ffa000 R14: 00000000200001c0 R15: 0000000020ffa000 03:25:07 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x2, 0x0) 03:25:07 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5452, 0x0) [ 646.714235][T21124] CPU: 1 PID: 21124 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 646.722786][T21124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 646.732829][T21124] Call Trace: [ 646.736094][T21124] dump_stack+0x141/0x1d7 [ 646.740417][T21124] should_fail.cold+0x5/0xa [ 646.744915][T21124] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 646.750366][T21124] should_failslab+0x5/0x10 [ 646.754858][T21124] __kmalloc+0x72/0x300 [ 646.759006][T21124] tomoyo_encode2.part.0+0xe9/0x3a0 [ 646.764204][T21124] tomoyo_encode+0x28/0x50 [ 646.768610][T21124] tomoyo_realpath_from_path+0x186/0x620 [ 646.774240][T21124] tomoyo_path_number_perm+0x1d5/0x590 [ 646.779695][T21124] ? tomoyo_path_number_perm+0x18d/0x590 [ 646.785544][T21124] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 646.791382][T21124] ? lock_downgrade+0x6e0/0x6e0 [ 646.796235][T21124] ? __fget_files+0x288/0x3d0 [ 646.800905][T21124] security_file_ioctl+0x50/0xb0 [ 646.805835][T21124] __x64_sys_ioctl+0xb3/0x200 [ 646.810503][T21124] do_syscall_64+0x3a/0xb0 [ 646.814910][T21124] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 646.820793][T21124] RIP: 0033:0x4665f9 [ 646.824670][T21124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 646.844613][T21124] RSP: 002b:00007f8658f5b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 646.853096][T21124] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 646.861052][T21124] RDX: 0000000020000440 RSI: 0000000000000002 RDI: 0000000000000003 [ 646.869011][T21124] RBP: 00007f8658f5b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 646.876967][T21124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.884925][T21124] R13: 00007fff9788c8ff R14: 00007f8658f5b300 R15: 0000000000022000 03:25:07 executing program 0 (fault-call:5 fault-nth:3): socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) [ 646.967967][T21124] ERROR: Out of memory at tomoyo_realpath_from_path. 03:25:07 executing program 5 (fault-call:1 fault-nth:2): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x2, &(0x7f0000000440)) 03:25:07 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5460, 0x0) 03:25:07 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5460, 0x0) 03:25:07 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x2, 0x0) 03:25:07 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5451, 0x0) [ 647.010850][T21142] FAULT_INJECTION: forcing a failure. [ 647.010850][T21142] name failslab, interval 1, probability 0, space 0, times 0 [ 647.070119][T21142] CPU: 1 PID: 21142 Comm: syz-executor.0 Not tainted 5.12.0-syzkaller #0 [ 647.078662][T21142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 647.088715][T21142] Call Trace: [ 647.091989][T21142] dump_stack+0x141/0x1d7 [ 647.096328][T21142] should_fail.cold+0x5/0xa [ 647.100931][T21142] ? percpu_ref_init+0xcc/0x3a0 [ 647.105868][T21142] should_failslab+0x5/0x10 [ 647.110375][T21142] kmem_cache_alloc_trace+0x55/0x290 [ 647.115837][T21142] ? io_uring_fasync+0x60/0x60 [ 647.120776][T21142] percpu_ref_init+0xcc/0x3a0 [ 647.125452][T21142] ? rcu_read_lock_sched_held+0x3a/0x70 [ 647.131009][T21142] io_uring_setup+0x42d/0x2a80 [ 647.135775][T21142] ? __context_tracking_exit+0xb8/0xe0 [ 647.141243][T21142] ? io_connect+0x680/0x680 [ 647.145935][T21142] ? syscall_enter_from_user_mode+0x27/0x70 [ 647.151841][T21142] do_syscall_64+0x3a/0xb0 [ 647.156259][T21142] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 647.162154][T21142] RIP: 0033:0x4665f9 [ 647.166047][T21142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 647.185660][T21142] RSP: 002b:00007f5774a9b108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 647.194078][T21142] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 647.202047][T21142] RDX: 0000000020ffa000 RSI: 0000000020000100 RDI: 00000000000020a0 [ 647.210544][T21142] RBP: 0000000020000100 R08: 0000000020000200 R09: 0000000020000200 03:25:08 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x54a0, 0x0) 03:25:08 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x54a1, 0x0) 03:25:08 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x54a0, 0x0) 03:25:08 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x54a2, 0x0) [ 647.218514][T21142] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000200 [ 647.226479][T21142] R13: 0000000020ffa000 R14: 00000000200001c0 R15: 0000000020ffa000 03:25:08 executing program 3 (fault-call:1 fault-nth:0): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x2, 0x0) 03:25:08 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5452, 0x0) [ 647.387238][T21163] FAULT_INJECTION: forcing a failure. [ 647.387238][T21163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.405082][T21166] FAULT_INJECTION: forcing a failure. [ 647.405082][T21166] name failslab, interval 1, probability 0, space 0, times 0 [ 647.427660][T21163] CPU: 1 PID: 21163 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 647.436428][T21163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 647.446480][T21163] Call Trace: [ 647.449751][T21163] dump_stack+0x141/0x1d7 [ 647.454087][T21163] should_fail.cold+0x5/0xa [ 647.458600][T21163] _copy_to_user+0x2c/0x150 [ 647.463108][T21163] simple_read_from_buffer+0xcc/0x160 [ 647.468492][T21163] proc_fail_nth_read+0x187/0x220 [ 647.473521][T21163] ? proc_exe_link+0x1d0/0x1d0 [ 647.478280][T21163] ? security_file_permission+0x248/0x560 [ 647.484024][T21163] ? proc_exe_link+0x1d0/0x1d0 [ 647.488807][T21163] vfs_read+0x1b5/0x570 [ 647.492974][T21163] ksys_read+0x12d/0x250 [ 647.497227][T21163] ? vfs_write+0xa30/0xa30 [ 647.501650][T21163] ? syscall_enter_from_user_mode+0x27/0x70 [ 647.507556][T21163] do_syscall_64+0x3a/0xb0 [ 647.511976][T21163] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 647.517874][T21163] RIP: 0033:0x41937c [ 647.521766][T21163] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 647.541373][T21163] RSP: 002b:00007f8658f5b170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 647.549788][T21163] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041937c [ 647.557757][T21163] RDX: 000000000000000f RSI: 00007f8658f5b1e0 RDI: 0000000000000004 [ 647.565728][T21163] RBP: 00007f8658f5b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 647.573696][T21163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.581663][T21163] R13: 00007fff9788c8ff R14: 00007f8658f5b300 R15: 0000000000022000 [ 647.615137][T21166] CPU: 1 PID: 21166 Comm: syz-executor.3 Not tainted 5.12.0-syzkaller #0 [ 647.623660][T21166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 647.633713][T21166] Call Trace: [ 647.636988][T21166] dump_stack+0x141/0x1d7 [ 647.641324][T21166] should_fail.cold+0x5/0xa [ 647.645840][T21166] ? tomoyo_realpath_from_path+0xc3/0x620 [ 647.651570][T21166] should_failslab+0x5/0x10 [ 647.656078][T21166] __kmalloc+0x72/0x300 [ 647.660241][T21166] tomoyo_realpath_from_path+0xc3/0x620 [ 647.665799][T21166] ? tomoyo_profile+0x42/0x50 [ 647.670481][T21166] tomoyo_path_number_perm+0x1d5/0x590 [ 647.675946][T21166] ? tomoyo_path_number_perm+0x18d/0x590 [ 647.681613][T21166] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 647.687450][T21166] ? lock_downgrade+0x6e0/0x6e0 [ 647.692321][T21166] ? __fget_files+0x288/0x3d0 [ 647.697008][T21166] security_file_ioctl+0x50/0xb0 [ 647.701964][T21166] __x64_sys_ioctl+0xb3/0x200 [ 647.706651][T21166] do_syscall_64+0x3a/0xb0 [ 647.711072][T21166] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 647.716974][T21166] RIP: 0033:0x4665f9 [ 647.720955][T21166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 647.740570][T21166] RSP: 002b:00007f5bdc7eb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 647.748988][T21166] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 647.756956][T21166] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000003 03:25:08 executing program 0 (fault-call:5 fault-nth:4): socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:25:08 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x54a3, 0x0) 03:25:08 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x54a1, 0x0) 03:25:08 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5460, 0x0) 03:25:08 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x2, &(0x7f0000000440)) [ 647.764927][T21166] RBP: 00007f5bdc7eb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 647.772898][T21166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.780954][T21166] R13: 00007ffcc24e8a9f R14: 00007f5bdc7eb300 R15: 0000000000022000 [ 647.802462][T21166] ERROR: Out of memory at tomoyo_realpath_from_path. 03:25:08 executing program 3 (fault-call:1 fault-nth:1): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x2, 0x0) 03:25:08 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x54a2, 0x0) 03:25:08 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x6364, 0x0) 03:25:08 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x3, &(0x7f0000000440)) 03:25:08 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x54a0, 0x0) [ 647.922002][T21180] FAULT_INJECTION: forcing a failure. [ 647.922002][T21180] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 647.983028][T21180] CPU: 1 PID: 21180 Comm: syz-executor.0 Not tainted 5.12.0-syzkaller #0 [ 647.991575][T21180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 648.001628][T21180] Call Trace: [ 648.004904][T21180] dump_stack+0x141/0x1d7 [ 648.009244][T21180] should_fail.cold+0x5/0xa [ 648.013761][T21180] __alloc_pages_nodemask+0x189/0x730 [ 648.019139][T21180] ? __debug_object_init+0x409/0xd10 [ 648.024428][T21180] ? __alloc_pages_slowpath.constprop.0+0x2270/0x2270 [ 648.031201][T21180] ? debug_object_destroy+0x210/0x210 [ 648.036574][T21180] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 648.042825][T21180] ? apparmor_capable+0x1d8/0x460 [ 648.047858][T21180] alloc_pages_current+0x18c/0x2a0 [ 648.050739][T21192] FAULT_INJECTION: forcing a failure. [ 648.050739][T21192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.053148][T21180] __get_free_pages+0x8/0x40 [ 648.053175][T21180] io_uring_setup+0xcc3/0x2a80 [ 648.053200][T21180] ? __context_tracking_exit+0xb8/0xe0 [ 648.053227][T21180] ? io_connect+0x680/0x680 [ 648.053254][T21180] ? syscall_enter_from_user_mode+0x27/0x70 [ 648.091452][T21180] do_syscall_64+0x3a/0xb0 [ 648.095878][T21180] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 648.101781][T21180] RIP: 0033:0x4665f9 [ 648.105672][T21180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 648.125276][T21180] RSP: 002b:00007f5774a9b108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 03:25:09 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x4, &(0x7f0000000440)) 03:25:09 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x54a3, 0x0) [ 648.133692][T21180] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 648.141654][T21180] RDX: 0000000020ffa000 RSI: 0000000020000100 RDI: 00000000000020a0 [ 648.149622][T21180] RBP: 0000000020000100 R08: 0000000020000200 R09: 0000000020000200 [ 648.157596][T21180] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000200 [ 648.165567][T21180] R13: 0000000020ffa000 R14: 00000000200001c0 R15: 0000000020ffa000 [ 648.173542][T21192] CPU: 0 PID: 21192 Comm: syz-executor.3 Not tainted 5.12.0-syzkaller #0 [ 648.181963][T21192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 648.192016][T21192] Call Trace: [ 648.195299][T21192] dump_stack+0x141/0x1d7 [ 648.199635][T21192] should_fail.cold+0x5/0xa [ 648.204153][T21192] _copy_from_user+0x2c/0x180 [ 648.208836][T21192] kstrtouint_from_user+0xb5/0x240 [ 648.213957][T21192] ? kstrtou8_from_user+0x210/0x210 [ 648.219178][T21192] proc_fail_nth_write+0x79/0x220 [ 648.224210][T21192] ? proc_task_getattr+0x1f0/0x1f0 [ 648.229334][T21192] ? proc_task_getattr+0x1f0/0x1f0 [ 648.234447][T21192] vfs_write+0x28e/0xa30 [ 648.238702][T21192] ksys_write+0x12d/0x250 [ 648.243039][T21192] ? __ia32_sys_read+0xb0/0xb0 [ 648.247816][T21192] ? syscall_enter_from_user_mode+0x27/0x70 [ 648.253977][T21192] do_syscall_64+0x3a/0xb0 [ 648.258410][T21192] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 648.264397][T21192] RIP: 0033:0x4192df [ 648.268292][T21192] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 648.287901][T21192] RSP: 002b:00007f5bdc7ca170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 648.296503][T21192] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004192df [ 648.304474][T21192] RDX: 0000000000000001 RSI: 00007f5bdc7ca1e0 RDI: 0000000000000003 [ 648.312444][T21192] RBP: 00007f5bdc7ca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 648.320412][T21192] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 648.328381][T21192] R13: 00007ffcc24e8a9f R14: 00007f5bdc7ca300 R15: 0000000000022000 03:25:09 executing program 0 (fault-call:5 fault-nth:5): socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:25:09 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x54a1, 0x0) 03:25:09 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x6364, 0x0) 03:25:09 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5, &(0x7f0000000440)) 03:25:09 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x2, 0x0) 03:25:09 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x8913, 0x0) 03:25:09 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x6, &(0x7f0000000440)) 03:25:09 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x54a2, 0x0) 03:25:09 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x8913, 0x0) 03:25:09 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x3, 0x0) 03:25:09 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x8914, 0x0) [ 648.629269][T21214] FAULT_INJECTION: forcing a failure. [ 648.629269][T21214] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 648.677357][T21214] CPU: 0 PID: 21214 Comm: syz-executor.0 Not tainted 5.12.0-syzkaller #0 [ 648.685993][T21214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 648.696045][T21214] Call Trace: [ 648.699321][T21214] dump_stack+0x141/0x1d7 [ 648.703657][T21214] should_fail.cold+0x5/0xa [ 648.708171][T21214] __alloc_pages_nodemask+0x189/0x730 [ 648.713557][T21214] ? __debug_object_init+0x409/0xd10 [ 648.718847][T21214] ? __alloc_pages_slowpath.constprop.0+0x2270/0x2270 [ 648.725616][T21214] ? debug_object_destroy+0x210/0x210 [ 648.730988][T21214] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 648.737235][T21214] ? apparmor_capable+0x1d8/0x460 [ 648.742268][T21214] alloc_pages_current+0x18c/0x2a0 [ 648.747396][T21214] __get_free_pages+0x8/0x40 [ 648.751992][T21214] io_uring_setup+0xe7a/0x2a80 [ 648.756763][T21214] ? __context_tracking_exit+0xb8/0xe0 [ 648.762229][T21214] ? io_connect+0x680/0x680 [ 648.766743][T21214] ? syscall_enter_from_user_mode+0x27/0x70 [ 648.772645][T21214] do_syscall_64+0x3a/0xb0 03:25:09 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x7, &(0x7f0000000440)) [ 648.777062][T21214] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 648.782961][T21214] RIP: 0033:0x4665f9 [ 648.786852][T21214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 648.806457][T21214] RSP: 002b:00007f5774a9b108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 648.814873][T21214] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 648.822843][T21214] RDX: 0000000020ffa000 RSI: 0000000020000100 RDI: 00000000000020a0 [ 648.830812][T21214] RBP: 0000000020000100 R08: 0000000020000200 R09: 0000000020000200 [ 648.838783][T21214] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000200 [ 648.846755][T21214] R13: 0000000020ffa000 R14: 00000000200001c0 R15: 0000000020ffa000 03:25:09 executing program 0 (fault-call:5 fault-nth:6): socketpair(0x10, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x88001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2ec48cba2e6da929) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20a0, &(0x7f0000000100)={0x0, 0xc15f, 0x8, 0x3, 0x13c, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x208682, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x700c1, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x76b80fda) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x11c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c011}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x6) 03:25:09 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x54a3, 0x0) 03:25:09 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x8933, 0x0) 03:25:09 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x4, 0x0) 03:25:09 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x8914, 0x0) 03:25:09 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x8, &(0x7f0000000440)) 03:25:10 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x400448c9, 0x0) 03:25:10 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5, 0x0) 03:25:10 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xe, &(0x7f0000000440)) [ 649.131887][T21242] FAULT_INJECTION: forcing a failure. [ 649.131887][T21242] name failslab, interval 1, probability 0, space 0, times 0 03:25:10 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x6364, 0x0) 03:25:10 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x8933, 0x0) [ 649.199951][T21242] CPU: 0 PID: 21242 Comm: syz-executor.0 Not tainted 5.12.0-syzkaller #0 [ 649.208586][T21242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 649.218637][T21242] Call Trace: [ 649.221911][T21242] dump_stack+0x141/0x1d7 [ 649.226250][T21242] should_fail.cold+0x5/0xa [ 649.230762][T21242] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 649.237096][T21242] should_failslab+0x5/0x10 [ 649.241605][T21242] kmem_cache_alloc_trace+0x55/0x290 [ 649.246896][T21242] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 649.253061][T21242] io_uring_setup+0x1dd6/0x2a80 [ 649.257916][T21242] ? __context_tracking_exit+0xb8/0xe0 [ 649.263381][T21242] ? io_connect+0x680/0x680 [ 649.267896][T21242] ? syscall_enter_from_user_mode+0x27/0x70 [ 649.273799][T21242] do_syscall_64+0x3a/0xb0 [ 649.278218][T21242] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 649.284113][T21242] RIP: 0033:0x4665f9 03:25:10 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x10, &(0x7f0000000440)) [ 649.288010][T21242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 649.307617][T21242] RSP: 002b:00007f5774a9b108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 649.316031][T21242] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 649.324000][T21242] RDX: 0000000020ffa000 RSI: 0000000020000100 RDI: 00000000000020a0 [ 649.331971][T21242] RBP: 0000000020000100 R08: 0000000020000200 R09: 0000000020000200 [ 649.339940][T21242] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000200 [ 649.347910][T21242] R13: 0000000020ffa000 R14: 00000000200001c0 R15: 0000000020ffa000 [ 649.440426][T21242] ------------[ cut here ]------------ [ 649.446458][T21242] WARNING: CPU: 0 PID: 21242 at fs/io_uring.c:7081 io_rsrc_node_switch+0x2a5/0x390 [ 649.461427][T21242] Modules linked in: [ 649.472349][T21242] CPU: 0 PID: 21242 Comm: syz-executor.0 Not tainted 5.12.0-syzkaller #0 [ 649.489856][T21242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 649.504403][T21242] RIP: 0010:io_rsrc_node_switch+0x2a5/0x390 [ 649.510555][T21242] Code: ff 4d 85 e4 74 a4 48 83 c4 20 5b 5d 41 5c 41 5d 41 5e 41 5f e9 fc 00 99 ff e8 f7 00 99 ff 0f 0b e9 ee fd ff ff e8 eb 00 99 ff <0f> 0b e9 9d fd ff ff 4c 89 f7 e8 7c e0 dc ff eb 8b 4c 89 ef e8 72 [ 649.542058][T21242] RSP: 0018:ffffc90009e17d90 EFLAGS: 00010246 [ 649.550976][T21242] RAX: 0000000000040000 RBX: ffff888027c20000 RCX: ffffc90001761000 [ 649.563584][T21242] RDX: 0000000000040000 RSI: ffffffff81db5d25 RDI: ffff888027c20000 [ 649.572555][T21242] RBP: 0000000000000000 R08: 0000000000000dc0 R09: ffffffff8c0b37d3 [ 649.583052][T21242] R10: fffffbfff18166fa R11: 0000000000000000 R12: 0000000000000000 [ 649.591507][T21242] R13: 0000000000000000 R14: ffff888027c20808 R15: 0000000000000000 [ 649.603031][T21242] FS: 00007f5774a9b700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 649.615666][T21242] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 649.622397][T21242] CR2: 00007fafe8b48008 CR3: 000000006f86e000 CR4: 0000000000350ef0 [ 649.636247][T21242] Call Trace: [ 649.639858][T21242] ? __kasan_kmalloc+0xad/0xc0 [ 649.646633][T21242] io_uring_setup+0xf75/0x2a80 [ 649.651473][T21242] ? __context_tracking_exit+0xb8/0xe0 [ 649.657722][T21242] ? io_connect+0x680/0x680 [ 649.662309][T21242] ? syscall_enter_from_user_mode+0x27/0x70 [ 649.669125][T21242] do_syscall_64+0x3a/0xb0 [ 649.673614][T21242] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 649.680665][T21242] RIP: 0033:0x4665f9 [ 649.686909][T21242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 649.708108][T21242] RSP: 002b:00007f5774a9b108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 649.719073][T21242] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 649.728443][T21242] RDX: 0000000020ffa000 RSI: 0000000020000100 RDI: 00000000000020a0 [ 649.739128][T21242] RBP: 0000000020000100 R08: 0000000020000200 R09: 0000000020000200 [ 649.753342][T21242] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000200 [ 649.767647][T21242] R13: 0000000020ffa000 R14: 00000000200001c0 R15: 0000000020ffa000 [ 649.781499][T21242] Kernel panic - not syncing: panic_on_warn set ... [ 649.788166][T21242] CPU: 0 PID: 21242 Comm: syz-executor.0 Not tainted 5.12.0-syzkaller #0 [ 649.796586][T21242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 649.806634][T21242] Call Trace: [ 649.809911][T21242] dump_stack+0x141/0x1d7 [ 649.814421][T21242] panic+0x306/0x73d [ 649.818322][T21242] ? __warn_printk+0xf3/0xf3 [ 649.822920][T21242] ? __warn.cold+0x1a/0x44 [ 649.827343][T21242] ? io_rsrc_node_switch+0x2a5/0x390 [ 649.832639][T21242] __warn.cold+0x35/0x44 [ 649.837062][T21242] ? io_rsrc_node_switch+0x2a5/0x390 [ 649.842353][T21242] report_bug+0x1bd/0x210 [ 649.846693][T21242] handle_bug+0x3c/0x60 [ 649.850855][T21242] exc_invalid_op+0x14/0x40 [ 649.855931][T21242] asm_exc_invalid_op+0x12/0x20 [ 649.860798][T21242] RIP: 0010:io_rsrc_node_switch+0x2a5/0x390 [ 649.866710][T21242] Code: ff 4d 85 e4 74 a4 48 83 c4 20 5b 5d 41 5c 41 5d 41 5e 41 5f e9 fc 00 99 ff e8 f7 00 99 ff 0f 0b e9 ee fd ff ff e8 eb 00 99 ff <0f> 0b e9 9d fd ff ff 4c 89 f7 e8 7c e0 dc ff eb 8b 4c 89 ef e8 72 [ 649.886319][T21242] RSP: 0018:ffffc90009e17d90 EFLAGS: 00010246 [ 649.892384][T21242] RAX: 0000000000040000 RBX: ffff888027c20000 RCX: ffffc90001761000 [ 649.900529][T21242] RDX: 0000000000040000 RSI: ffffffff81db5d25 RDI: ffff888027c20000 [ 649.908482][T21242] RBP: 0000000000000000 R08: 0000000000000dc0 R09: ffffffff8c0b37d3 [ 649.916433][T21242] R10: fffffbfff18166fa R11: 0000000000000000 R12: 0000000000000000 [ 649.924558][T21242] R13: 0000000000000000 R14: ffff888027c20808 R15: 0000000000000000 [ 649.932514][T21242] ? io_rsrc_node_switch+0x2a5/0x390 [ 649.937792][T21242] ? __kasan_kmalloc+0xad/0xc0 [ 649.942557][T21242] io_uring_setup+0xf75/0x2a80 [ 649.947392][T21242] ? __context_tracking_exit+0xb8/0xe0 [ 649.952837][T21242] ? io_connect+0x680/0x680 [ 649.957329][T21242] ? syscall_enter_from_user_mode+0x27/0x70 [ 649.963383][T21242] do_syscall_64+0x3a/0xb0 [ 649.967784][T21242] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 649.973666][T21242] RIP: 0033:0x4665f9 [ 649.977538][T21242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 649.997125][T21242] RSP: 002b:00007f5774a9b108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 650.005521][T21242] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 650.013659][T21242] RDX: 0000000020ffa000 RSI: 0000000020000100 RDI: 00000000000020a0 [ 650.021609][T21242] RBP: 0000000020000100 R08: 0000000020000200 R09: 0000000020000200 [ 650.029559][T21242] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000200 [ 650.037509][T21242] R13: 0000000020ffa000 R14: 00000000200001c0 R15: 0000000020ffa000 [ 650.049611][T21242] Kernel Offset: disabled [ 650.054106][T21242] Rebooting in 86400 seconds..