syzkaller login: [ 315.275485][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 323.134887][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 323.205746][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 323.236389][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:6619' (ECDSA) to the list of known hosts. 1970/01/01 00:06:28 fuzzer started 1970/01/01 00:06:45 dialing manager at localhost:37477 [ 411.232049][ T2026] cgroup: Unknown subsys name 'net' [ 412.267668][ T2026] cgroup: Unknown subsys name 'rlimit' 1970/01/01 00:06:52 syscalls: 2918 1970/01/01 00:06:52 code coverage: enabled 1970/01/01 00:06:52 comparison tracing: enabled 1970/01/01 00:06:52 extra coverage: enabled 1970/01/01 00:06:52 delay kcov mmap: mmap returned an invalid pointer 1970/01/01 00:06:52 setuid sandbox: enabled 1970/01/01 00:06:52 namespace sandbox: enabled 1970/01/01 00:06:52 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:06:52 fault injection: enabled 1970/01/01 00:06:52 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:06:52 net packet injection: enabled 1970/01/01 00:06:52 net device setup: enabled 1970/01/01 00:06:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:06:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:06:52 NIC VF setup: PCI device 0000:00:11.0 is not available 1970/01/01 00:06:52 USB emulation: enabled 1970/01/01 00:06:52 hci packet injection: /dev/vhci does not exist 1970/01/01 00:06:52 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:06:52 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:06:52 fetching corpus: 0, signal 0/2000 (executing program) 1970/01/01 00:06:58 fetching corpus: 50, signal 37151/40021 (executing program) 1970/01/01 00:07:02 fetching corpus: 100, signal 50529/54222 (executing program) 1970/01/01 00:07:05 fetching corpus: 150, signal 57869/62324 (executing program) 1970/01/01 00:07:09 fetching corpus: 200, signal 64500/69540 (executing program) 1970/01/01 00:07:11 fetching corpus: 250, signal 68475/74171 (executing program) 1970/01/01 00:07:14 fetching corpus: 300, signal 75446/81346 (executing program) 1970/01/01 00:07:16 fetching corpus: 350, signal 78013/84449 (executing program) 1970/01/01 00:07:18 fetching corpus: 400, signal 81841/88582 (executing program) 1970/01/01 00:07:21 fetching corpus: 450, signal 84557/91648 (executing program) 1970/01/01 00:07:23 fetching corpus: 500, signal 89146/96192 (executing program) 1970/01/01 00:07:25 fetching corpus: 550, signal 91300/98571 (executing program) 1970/01/01 00:07:28 fetching corpus: 600, signal 93687/101069 (executing program) 1970/01/01 00:07:31 fetching corpus: 649, signal 96725/104037 (executing program) 1970/01/01 00:07:36 fetching corpus: 699, signal 100226/107258 (executing program) 1970/01/01 00:07:38 fetching corpus: 749, signal 102249/109244 (executing program) 1970/01/01 00:07:43 fetching corpus: 799, signal 105199/111909 (executing program) 1970/01/01 00:07:46 fetching corpus: 848, signal 106611/113325 (executing program) 1970/01/01 00:07:48 fetching corpus: 898, signal 109324/115661 (executing program) 1970/01/01 00:07:51 fetching corpus: 948, signal 111939/117786 (executing program) 1970/01/01 00:07:54 fetching corpus: 997, signal 114301/119658 (executing program) 1970/01/01 00:07:57 fetching corpus: 1047, signal 116996/121696 (executing program) 1970/01/01 00:08:01 fetching corpus: 1096, signal 119316/123432 (executing program) 1970/01/01 00:08:06 fetching corpus: 1146, signal 121594/125051 (executing program) 1970/01/01 00:08:09 fetching corpus: 1196, signal 123890/126624 (executing program) 1970/01/01 00:08:13 fetching corpus: 1246, signal 125728/127847 (executing program) 1970/01/01 00:08:15 fetching corpus: 1296, signal 127223/128822 (executing program) 1970/01/01 00:08:16 fetching corpus: 1304, signal 127448/129015 (executing program) 1970/01/01 00:08:16 fetching corpus: 1304, signal 127448/129063 (executing program) 1970/01/01 00:08:16 fetching corpus: 1304, signal 127448/129112 (executing program) 1970/01/01 00:08:16 fetching corpus: 1304, signal 127448/129169 (executing program) 1970/01/01 00:08:17 fetching corpus: 1304, signal 127448/129231 (executing program) 1970/01/01 00:08:17 fetching corpus: 1304, signal 127448/129285 (executing program) 1970/01/01 00:08:17 fetching corpus: 1304, signal 127448/129344 (executing program) 1970/01/01 00:08:17 fetching corpus: 1304, signal 127448/129385 (executing program) 1970/01/01 00:08:17 fetching corpus: 1304, signal 127448/129455 (executing program) 1970/01/01 00:08:17 fetching corpus: 1304, signal 127448/129502 (executing program) 1970/01/01 00:08:18 fetching corpus: 1304, signal 127448/129553 (executing program) 1970/01/01 00:08:18 fetching corpus: 1304, signal 127448/129590 (executing program) 1970/01/01 00:08:18 fetching corpus: 1304, signal 127448/129654 (executing program) 1970/01/01 00:08:18 fetching corpus: 1304, signal 127448/129717 (executing program) 1970/01/01 00:08:18 fetching corpus: 1304, signal 127448/129779 (executing program) 1970/01/01 00:08:18 fetching corpus: 1304, signal 127448/129846 (executing program) 1970/01/01 00:08:18 fetching corpus: 1304, signal 127448/129905 (executing program) 1970/01/01 00:08:19 fetching corpus: 1304, signal 127448/129952 (executing program) 1970/01/01 00:08:19 fetching corpus: 1304, signal 127448/130003 (executing program) 1970/01/01 00:08:19 fetching corpus: 1304, signal 127448/130058 (executing program) 1970/01/01 00:08:19 fetching corpus: 1304, signal 127448/130121 (executing program) 1970/01/01 00:08:19 fetching corpus: 1304, signal 127448/130174 (executing program) 1970/01/01 00:08:19 fetching corpus: 1304, signal 127448/130243 (executing program) 1970/01/01 00:08:19 fetching corpus: 1304, signal 127448/130298 (executing program) 1970/01/01 00:08:20 fetching corpus: 1304, signal 127448/130353 (executing program) 1970/01/01 00:08:20 fetching corpus: 1304, signal 127448/130419 (executing program) 1970/01/01 00:08:20 fetching corpus: 1304, signal 127448/130463 (executing program) 1970/01/01 00:08:20 fetching corpus: 1304, signal 127449/130520 (executing program) 1970/01/01 00:08:20 fetching corpus: 1305, signal 127460/130574 (executing program) 1970/01/01 00:08:20 fetching corpus: 1305, signal 127460/130644 (executing program) 1970/01/01 00:08:20 fetching corpus: 1305, signal 127460/130696 (executing program) 1970/01/01 00:08:21 fetching corpus: 1305, signal 127460/130762 (executing program) 1970/01/01 00:08:21 fetching corpus: 1305, signal 127460/130816 (executing program) 1970/01/01 00:08:21 fetching corpus: 1305, signal 127460/130866 (executing program) 1970/01/01 00:08:21 fetching corpus: 1305, signal 127460/130911 (executing program) 1970/01/01 00:08:21 fetching corpus: 1305, signal 127460/130964 (executing program) 1970/01/01 00:08:21 fetching corpus: 1305, signal 127460/131031 (executing program) 1970/01/01 00:08:22 fetching corpus: 1305, signal 127460/131094 (executing program) 1970/01/01 00:08:22 fetching corpus: 1305, signal 127460/131124 (executing program) 1970/01/01 00:08:22 fetching corpus: 1305, signal 127460/131124 (executing program) 1970/01/01 00:10:16 starting 2 fuzzer processes 00:10:16 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000005dc0), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000000)) 00:10:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, &(0x7f0000000b00)=""/84, 0x54) [ 648.773303][ T2039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.898883][ T2039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.578873][ T2041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.676952][ T2041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.454587][ T2039] device hsr_slave_0 entered promiscuous mode [ 665.483807][ T2039] device hsr_slave_1 entered promiscuous mode [ 668.328683][ T2041] device hsr_slave_0 entered promiscuous mode [ 668.423232][ T2041] device hsr_slave_1 entered promiscuous mode [ 668.473195][ T2041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 668.477731][ T2041] Cannot create hsr debugfs directory [ 676.205763][ T2039] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 676.444336][ T2039] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 676.581185][ T2039] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 676.968692][ T2039] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 678.147312][ T2041] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 678.376995][ T2041] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 678.760942][ T2041] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 679.096609][ T2041] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 688.951668][ T2039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.031977][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 690.167480][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 691.026863][ T2041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.706152][ T2667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 691.796200][ T2667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 697.677432][ T2028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 697.763832][ T2028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 698.001105][ T2029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 698.078113][ T2029] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 698.301843][ T2029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 698.838332][ T2667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 699.688828][ T2028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 699.708622][ T2028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 700.031162][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 700.078229][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 700.332633][ T2039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 701.166905][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 701.254966][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 701.528452][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 701.578159][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 701.805335][ T2667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 702.956515][ T2667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 703.333418][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 703.368729][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 703.583070][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 703.662186][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 703.863711][ T2041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 706.783220][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 706.787248][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 709.605389][ T2029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 709.685527][ T2029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 720.662331][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 720.704386][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 722.995417][ T2029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 723.046839][ T2029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 727.514637][ T2029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 727.547715][ T2029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 727.653844][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 727.688171][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 727.735551][ T2039] device veth0_vlan entered promiscuous mode [ 728.213291][ T2039] device veth1_vlan entered promiscuous mode [ 729.407461][ T2039] device veth0_macvtap entered promiscuous mode [ 729.734263][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 729.830731][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 729.886329][ T2039] device veth1_macvtap entered promiscuous mode [ 729.997849][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 730.357837][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 730.394507][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 730.508281][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 730.573573][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 730.687538][ T2041] device veth0_vlan entered promiscuous mode [ 731.294941][ T2041] device veth1_vlan entered promiscuous mode [ 731.522489][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 731.548092][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 731.798751][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 731.882272][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 732.113233][ T2039] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.116803][ T2039] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.118428][ T2039] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.136311][ T2039] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.008048][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 734.061982][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 734.321788][ T2041] device veth0_macvtap entered promiscuous mode [ 734.614961][ T2041] device veth1_macvtap entered promiscuous mode [ 735.211961][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 735.922326][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 735.992914][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 736.574979][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 736.614887][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 736.877734][ T2041] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.900935][ T2041] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.903203][ T2041] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.905662][ T2041] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:12:24 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000005dc0), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000000)) 00:12:28 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, &(0x7f0000000b00)=""/84, 0x54) 00:12:29 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000005dc0), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000000)) 00:12:33 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, &(0x7f0000000b00)=""/84, 0x54) 00:12:36 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000005dc0), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000000)) 00:12:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, &(0x7f0000000b00)=""/84, 0x54) 00:12:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, &(0x7f0000000b00)=""/84, 0x54) 00:12:46 executing program 1: futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x20000000) 00:12:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, &(0x7f0000000b00)=""/84, 0x54) 00:12:48 executing program 1: futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x20000000) 00:12:50 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, &(0x7f0000000b00)=""/84, 0x54) 00:12:52 executing program 1: futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x20000000) 00:12:55 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x72}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) 00:12:56 executing program 1: futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x20000000) 00:12:58 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x72}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) 00:13:00 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getpeername$inet(r0, 0x0, 0x0) 00:13:01 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x72}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) 00:13:03 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getpeername$inet(r0, 0x0, 0x0) 00:13:05 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x72}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) 00:13:07 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getpeername$inet(r0, 0x0, 0x0) 00:13:10 executing program 0: r0 = memfd_secret(0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x5b) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="80", 0x1, 0x48d5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) 00:13:11 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getpeername$inet(r0, 0x0, 0x0) 00:13:13 executing program 0: r0 = memfd_secret(0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x5b) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="80", 0x1, 0x48d5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) 00:13:14 executing program 1: r0 = memfd_secret(0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x5b) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="80", 0x1, 0x48d5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) 00:13:18 executing program 0: r0 = memfd_secret(0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x5b) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="80", 0x1, 0x48d5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) 00:13:18 executing program 1: r0 = memfd_secret(0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x5b) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="80", 0x1, 0x48d5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) 00:13:23 executing program 0: r0 = memfd_secret(0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x5b) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="80", 0x1, 0x48d5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) 00:13:24 executing program 1: r0 = memfd_secret(0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x5b) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="80", 0x1, 0x48d5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) 00:13:29 executing program 0: r0 = memfd_secret(0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x5b) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="80", 0x1, 0x48d5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) 00:13:30 executing program 1: r0 = memfd_secret(0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x5b) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="80", 0x1, 0x48d5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) 00:13:32 executing program 1: r0 = memfd_secret(0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x5b) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="80", 0x1, 0x48d5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) 00:13:33 executing program 0: r0 = memfd_secret(0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x5b) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="80", 0x1, 0x48d5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) 00:13:36 executing program 1: r0 = memfd_secret(0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x5b) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="80", 0x1, 0x48d5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) 00:13:37 executing program 0: r0 = memfd_secret(0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x5b) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="80", 0x1, 0x48d5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) 00:13:42 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x80, 0x17, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="8e"}) 00:13:42 executing program 0: r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="ed", 0xfdef}], 0x1, 0x9, 0x0) 00:13:45 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x80, 0x17, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="8e"}) 00:13:47 executing program 0: r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="ed", 0xfdef}], 0x1, 0x9, 0x0) 00:13:47 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x80, 0x17, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="8e"}) 00:13:50 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x80, 0x17, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="8e"}) 00:13:50 executing program 0: r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="ed", 0xfdef}], 0x1, 0x9, 0x0) 00:13:54 executing program 1: r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="ed", 0xfdef}], 0x1, 0x9, 0x0) 00:13:55 executing program 0: r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="ed", 0xfdef}], 0x1, 0x9, 0x0) 00:13:56 executing program 1: r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="ed", 0xfdef}], 0x1, 0x9, 0x0) 00:13:59 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x80, 0x17, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="8e"}) 00:14:00 executing program 1: r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="ed", 0xfdef}], 0x1, 0x9, 0x0) 00:14:02 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x80, 0x17, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="8e"}) 00:14:06 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfdef) ppoll(&(0x7f0000000680)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000000), 0xf) 00:14:06 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x80, 0x17, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="8e"}) 00:14:11 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000140), 0x0, 0x38, 0x0) 00:14:11 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfdef) ppoll(&(0x7f0000000680)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000000), 0xf) 00:14:13 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000140), 0x0, 0x38, 0x0) 00:14:19 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfdef) ppoll(&(0x7f0000000680)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000000), 0xf) 00:14:20 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000140), 0x0, 0x38, 0x0) 00:14:24 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000140), 0x0, 0x38, 0x0) 00:14:27 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfdef) ppoll(&(0x7f0000000680)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000000), 0xf) 00:14:31 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfdef) ppoll(&(0x7f0000000680)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000000), 0xf) 00:14:33 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfdef) ppoll(&(0x7f0000000680)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000000), 0xf) 00:14:35 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfdef) ppoll(&(0x7f0000000680)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000000), 0xf) 00:14:39 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfdef) ppoll(&(0x7f0000000680)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000000), 0xf) 00:14:40 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfdef) ppoll(&(0x7f0000000680)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000000), 0xf) 00:14:45 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfdef) ppoll(&(0x7f0000000680)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000000), 0xf) 00:14:46 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x10000, 0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000010f60)) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffff9c, 0x0, 0x20) 00:14:48 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x10000, 0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000010f60)) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffff9c, 0x0, 0x20) 00:14:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x10000, 0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000010f60)) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffff9c, 0x0, 0x20) 00:14:52 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x10000, 0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000010f60)) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffff9c, 0x0, 0x20) 00:14:54 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x10000, 0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000010f60)) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffff9c, 0x0, 0x20) 00:14:55 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x10000, 0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000010f60)) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffff9c, 0x0, 0x20) 00:14:58 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x10000, 0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000010f60)) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffff9c, 0x0, 0x20) 00:15:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x9) fallocate(r0, 0x0, 0x0, 0x8800000) accept4(r0, &(0x7f0000000580)=@alg, &(0x7f0000000140)=0xfe36, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe66e1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) ftruncate(r1, 0x4d0) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r1) statx(r1, &(0x7f0000000100)='./file0/../file0\x00', 0x400, 0x20, &(0x7f0000000180)) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x81000) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4d0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a70209008ae910cc949e255fa78a19b321af3fff33f00124e9c47967b59d55383e48c12e6fc66e27a955118cb9f74214bb26b689d957bee74c215c73979af06e5e37da8cb9d849f62d02330996b952d247cfba686a8eda9d262809da81c86104c203771323b12cf04ec365a0781ab10ad7a30852b8d9de10fa46891e96156457dcf1ac3edef0d82ef5d13fd079ed7dd7f2c5d2a2c8e594dd06a4e289cc6358b3c895e20000ee0f742a27a24328c09a88a2e0bf7d2cc987006885d326bee9eb1ba96b965f4f198257b04951451050b9bb24bec52df170aa39f59cef2dd925a2015f4f43e4a85819bb4e26ddadeb7a8d95a35392e25ed5b5698c8a6f9c3dd64cc03dc20ca546765ebc125074332b", @ANYRES16=r2, @ANYBLOB="00082bbd7000fddbdf250100000014000900fe8000000000000000000000000000bb04000500060001004e2000000400050008000600ac1414bb"], 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x1) mount_setattr(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8100, &(0x7f0000000340)={0x6, 0x6, 0x100000}, 0x20) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000280)=0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4e25, @empty}, {0x2, 0x0, @dev}, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x200000000800, 0x7}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x100000) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20000000) 00:15:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x9) fallocate(r0, 0x0, 0x0, 0x8800000) accept4(r0, &(0x7f0000000580)=@alg, &(0x7f0000000140)=0xfe36, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe66e1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) ftruncate(r1, 0x4d0) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r1) statx(r1, &(0x7f0000000100)='./file0/../file0\x00', 0x400, 0x20, &(0x7f0000000180)) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x81000) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4d0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="00082bbd7000fddbdf250100000014000900fe8000000000000000000000000000bb04000500060001004e2000000400050008000600ac1414bb"], 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x1) mount_setattr(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8100, &(0x7f0000000340)={0x6, 0x6, 0x100000}, 0x20) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000280)=0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4e25, @empty}, {0x2, 0x0, @dev}, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x200000000800, 0x7}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x100000) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20000000) 00:15:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x9) fallocate(r0, 0x0, 0x0, 0x8800000) accept4(r0, &(0x7f0000000580)=@alg, &(0x7f0000000140)=0xfe36, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe66e1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) ftruncate(r1, 0x4d0) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r1) statx(r1, &(0x7f0000000100)='./file0/../file0\x00', 0x400, 0x20, &(0x7f0000000180)) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x81000) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4d0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="00082bbd7000fddbdf250100000014000900fe8000000000000000000000000000bb04000500060001004e2000000400050008000600ac1414bb"], 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x1) mount_setattr(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8100, &(0x7f0000000340)={0x6, 0x6, 0x100000}, 0x20) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000280)=0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4e25, @empty}, {0x2, 0x0, @dev}, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x200000000800, 0x7}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x100000) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20000000) 00:15:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x9) fallocate(r0, 0x0, 0x0, 0x8800000) accept4(r0, &(0x7f0000000580)=@alg, &(0x7f0000000140)=0xfe36, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe66e1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) ftruncate(r1, 0x4d0) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r1) statx(r1, &(0x7f0000000100)='./file0/../file0\x00', 0x400, 0x20, &(0x7f0000000180)) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x81000) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4d0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="00082bbd7000fddbdf250100000014000900fe8000000000000000000000000000bb04000500060001004e2000000400050008000600ac1414bb"], 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x1) mount_setattr(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8100, &(0x7f0000000340)={0x6, 0x6, 0x100000}, 0x20) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000280)=0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4e25, @empty}, {0x2, 0x0, @dev}, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x200000000800, 0x7}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x100000) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20000000) 00:15:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x9) fallocate(r0, 0x0, 0x0, 0x8800000) accept4(r0, &(0x7f0000000580)=@alg, &(0x7f0000000140)=0xfe36, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe66e1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) ftruncate(r1, 0x4d0) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r1) statx(r1, &(0x7f0000000100)='./file0/../file0\x00', 0x400, 0x20, &(0x7f0000000180)) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x81000) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4d0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="00082bbd7000fddbdf250100000014000900fe8000000000000000000000000000bb04000500060001004e2000000400050008000600ac1414bb"], 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x1) mount_setattr(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8100, &(0x7f0000000340)={0x6, 0x6, 0x100000}, 0x20) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000280)=0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4e25, @empty}, {0x2, 0x0, @dev}, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x200000000800, 0x7}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x100000) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20000000) 00:15:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x9) fallocate(r0, 0x0, 0x0, 0x8800000) accept4(r0, &(0x7f0000000580)=@alg, &(0x7f0000000140)=0xfe36, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe66e1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) ftruncate(r1, 0x4d0) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r1) statx(r1, &(0x7f0000000100)='./file0/../file0\x00', 0x400, 0x20, &(0x7f0000000180)) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x81000) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4d0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a70209008ae910cc949e255fa78a19b321af3fff33f00124e9c47967b59d55383e48c12e6fc66e27a955118cb9f74214bb26b689d957bee74c215c73979af06e5e37da8cb9d849f62d02330996b952d247cfba686a8eda9d262809da81c86104c203771323b12cf04ec365a0781ab10ad7a30852b8d9de10fa46891e96156457dcf1ac3edef0d82ef5d13fd079ed7dd7f2c5d2a2c8e594dd06a4e289cc6358b3c895e20000ee0f742a27a24328c09a88a2e0bf7d2cc987006885d326bee9eb1ba96b965f4f198257b04951451050b9bb24bec52df170aa39f59cef2dd925a2015f4f43e4a85819bb4e26ddadeb7a8d95a35392e25ed5b5698c8a6f9c3dd64cc03dc20ca546765ebc125074332b", @ANYRES16=r2, @ANYBLOB="00082bbd7000fddbdf250100000014000900fe8000000000000000000000000000bb04000500060001004e2000000400050008000600ac1414bb"], 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x1) mount_setattr(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8100, &(0x7f0000000340)={0x6, 0x6, 0x100000}, 0x20) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000280)=0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4e25, @empty}, {0x2, 0x0, @dev}, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x200000000800, 0x7}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x100000) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20000000) 00:15:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x9) fallocate(r0, 0x0, 0x0, 0x8800000) accept4(r0, &(0x7f0000000580)=@alg, &(0x7f0000000140)=0xfe36, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe66e1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) ftruncate(r1, 0x4d0) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r1) statx(r1, &(0x7f0000000100)='./file0/../file0\x00', 0x400, 0x20, &(0x7f0000000180)) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x81000) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4d0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a70209008ae910cc949e255fa78a19b321af3fff33f00124e9c47967b59d55383e48c12e6fc66e27a955118cb9f74214bb26b689d957bee74c215c73979af06e5e37da8cb9d849f62d02330996b952d247cfba686a8eda9d262809da81c86104c203771323b12cf04ec365a0781ab10ad7a30852b8d9de10fa46891e96156457dcf1ac3edef0d82ef5d13fd079ed7dd7f2c5d2a2c8e594dd06a4e289cc6358b3c895e20000ee0f742a27a24328c09a88a2e0bf7d2cc987006885d326bee9eb1ba96b965f4f198257b04951451050b9bb24bec52df170aa39f59cef2dd925a2015f4f43e4a85819bb4e26ddadeb7a8d95a35392e25ed5b5698c8a6f9c3dd64cc03dc20ca546765ebc125074332b", @ANYRES16=r2, @ANYBLOB="00082bbd7000fddbdf250100000014000900fe8000000000000000000000000000bb04000500060001004e2000000400050008000600ac1414bb"], 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x1) mount_setattr(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8100, &(0x7f0000000340)={0x6, 0x6, 0x100000}, 0x20) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000280)=0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4e25, @empty}, {0x2, 0x0, @dev}, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x200000000800, 0x7}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x100000) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20000000) 00:15:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x9) fallocate(r0, 0x0, 0x0, 0x8800000) accept4(r0, &(0x7f0000000580)=@alg, &(0x7f0000000140)=0xfe36, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe66e1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) ftruncate(r1, 0x4d0) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r1) statx(r1, &(0x7f0000000100)='./file0/../file0\x00', 0x400, 0x20, &(0x7f0000000180)) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x81000) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4d0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="00082bbd7000fddbdf250100000014000900fe8000000000000000000000000000bb04000500060001004e2000000400050008000600ac1414bb"], 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x1) mount_setattr(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8100, &(0x7f0000000340)={0x6, 0x6, 0x100000}, 0x20) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000280)=0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4e25, @empty}, {0x2, 0x0, @dev}, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x200000000800, 0x7}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x100000) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20000000) 00:15:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x9) fallocate(r0, 0x0, 0x0, 0x8800000) accept4(r0, &(0x7f0000000580)=@alg, &(0x7f0000000140)=0xfe36, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe66e1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) ftruncate(r1, 0x4d0) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r1) statx(r1, &(0x7f0000000100)='./file0/../file0\x00', 0x400, 0x20, &(0x7f0000000180)) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x81000) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4d0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="00082bbd7000fddbdf250100000014000900fe8000000000000000000000000000bb04000500060001004e2000000400050008000600ac1414bb"], 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x1) mount_setattr(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8100, &(0x7f0000000340)={0x6, 0x6, 0x100000}, 0x20) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000280)=0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4e25, @empty}, {0x2, 0x0, @dev}, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x200000000800, 0x7}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x100000) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20000000) 00:15:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x9) fallocate(r0, 0x0, 0x0, 0x8800000) accept4(r0, &(0x7f0000000580)=@alg, &(0x7f0000000140)=0xfe36, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe66e1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) ftruncate(r1, 0x4d0) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r1) statx(r1, &(0x7f0000000100)='./file0/../file0\x00', 0x400, 0x20, &(0x7f0000000180)) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x81000) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4d0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="00082bbd7000fddbdf250100000014000900fe8000000000000000000000000000bb04000500060001004e2000000400050008000600ac1414bb"], 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x1) mount_setattr(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8100, &(0x7f0000000340)={0x6, 0x6, 0x100000}, 0x20) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000280)=0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4e25, @empty}, {0x2, 0x0, @dev}, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x200000000800, 0x7}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x100000) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20000000) 00:15:27 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x9) fallocate(r0, 0x0, 0x0, 0x8800000) accept4(r0, &(0x7f0000000580)=@alg, &(0x7f0000000140)=0xfe36, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe66e1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) ftruncate(r1, 0x4d0) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r1) statx(r1, &(0x7f0000000100)='./file0/../file0\x00', 0x400, 0x20, &(0x7f0000000180)) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x81000) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4d0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a70209008ae910cc949e255fa78a19b321af3fff33f00124e9c47967b59d55383e48c12e6fc66e27a955118cb9f74214bb26b689d957bee74c215c73979af06e5e37da8cb9d849f62d02330996b952d247cfba686a8eda9d262809da81c86104c203771323b12cf04ec365a0781ab10ad7a30852b8d9de10fa46891e96156457dcf1ac3edef0d82ef5d13fd079ed7dd7f2c5d2a2c8e594dd06a4e289cc6358b3c895e20000ee0f742a27a24328c09a88a2e0bf7d2cc987006885d326bee9eb1ba96b965f4f198257b04951451050b9bb24bec52df170aa39f59cef2dd925a2015f4f43e4a85819bb4e26ddadeb7a8d95a35392e25ed5b5698c8a6f9c3dd64cc03dc20ca546765ebc125074332b", @ANYRES16=r2, @ANYBLOB="00082bbd7000fddbdf250100000014000900fe8000000000000000000000000000bb04000500060001004e2000000400050008000600ac1414bb"], 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x1) mount_setattr(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8100, &(0x7f0000000340)={0x6, 0x6, 0x100000}, 0x20) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000280)=0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4e25, @empty}, {0x2, 0x0, @dev}, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x200000000800, 0x7}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x100000) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20000000) 00:15:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x9) fallocate(r0, 0x0, 0x0, 0x8800000) accept4(r0, &(0x7f0000000580)=@alg, &(0x7f0000000140)=0xfe36, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe66e1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) ftruncate(r1, 0x4d0) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r1) statx(r1, &(0x7f0000000100)='./file0/../file0\x00', 0x400, 0x20, &(0x7f0000000180)) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x81000) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4d0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="00082bbd7000fddbdf250100000014000900fe8000000000000000000000000000bb04000500060001004e2000000400050008000600ac1414bb"], 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x1) mount_setattr(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8100, &(0x7f0000000340)={0x6, 0x6, 0x100000}, 0x20) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000280)=0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4e25, @empty}, {0x2, 0x0, @dev}, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x200000000800, 0x7}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x100000) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20000000) 00:15:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x9) fallocate(r0, 0x0, 0x0, 0x8800000) accept4(r0, &(0x7f0000000580)=@alg, &(0x7f0000000140)=0xfe36, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe66e1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) ftruncate(r1, 0x4d0) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r1) statx(r1, &(0x7f0000000100)='./file0/../file0\x00', 0x400, 0x20, &(0x7f0000000180)) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x81000) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4d0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="00082bbd7000fddbdf250100000014000900fe8000000000000000000000000000bb04000500060001004e2000000400050008000600ac1414bb"], 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x1) mount_setattr(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8100, &(0x7f0000000340)={0x6, 0x6, 0x100000}, 0x20) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000280)=0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4e25, @empty}, {0x2, 0x0, @dev}, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x200000000800, 0x7}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x100000) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20000000) 00:15:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x9) fallocate(r0, 0x0, 0x0, 0x8800000) accept4(r0, &(0x7f0000000580)=@alg, &(0x7f0000000140)=0xfe36, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe66e1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) ftruncate(r1, 0x4d0) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r1) statx(r1, &(0x7f0000000100)='./file0/../file0\x00', 0x400, 0x20, &(0x7f0000000180)) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x81000) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4d0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a70209008ae910cc949e255fa78a19b321af3fff33f00124e9c47967b59d55383e48c12e6fc66e27a955118cb9f74214bb26b689d957bee74c215c73979af06e5e37da8cb9d849f62d02330996b952d247cfba686a8eda9d262809da81c86104c203771323b12cf04ec365a0781ab10ad7a30852b8d9de10fa46891e96156457dcf1ac3edef0d82ef5d13fd079ed7dd7f2c5d2a2c8e594dd06a4e289cc6358b3c895e20000ee0f742a27a24328c09a88a2e0bf7d2cc987006885d326bee9eb1ba96b965f4f198257b04951451050b9bb24bec52df170aa39f59cef2dd925a2015f4f43e4a85819bb4e26ddadeb7a8d95a35392e25ed5b5698c8a6f9c3dd64cc03dc20ca546765ebc125074332b", @ANYRES16=r2, @ANYBLOB="00082bbd7000fddbdf250100000014000900fe8000000000000000000000000000bb04000500060001004e2000000400050008000600ac1414bb"], 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x1) mount_setattr(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8100, &(0x7f0000000340)={0x6, 0x6, 0x100000}, 0x20) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000280)=0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4e25, @empty}, {0x2, 0x0, @dev}, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x200000000800, 0x7}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x100000) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20000000) 00:15:41 executing program 1: syz_io_uring_setup(0x76a9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb) 00:15:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x9) fallocate(r0, 0x0, 0x0, 0x8800000) accept4(r0, &(0x7f0000000580)=@alg, &(0x7f0000000140)=0xfe36, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe66e1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) ftruncate(r1, 0x4d0) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r1) statx(r1, &(0x7f0000000100)='./file0/../file0\x00', 0x400, 0x20, &(0x7f0000000180)) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x81000) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4d0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="00082bbd7000fddbdf250100000014000900fe8000000000000000000000000000bb04000500060001004e2000000400050008000600ac1414bb"], 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x1) mount_setattr(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8100, &(0x7f0000000340)={0x6, 0x6, 0x100000}, 0x20) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000280)=0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4e25, @empty}, {0x2, 0x0, @dev}, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x200000000800, 0x7}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x100000) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20000000) 00:15:45 executing program 1: syz_io_uring_setup(0x76a9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb) 00:15:48 executing program 1: syz_io_uring_setup(0x76a9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb) 00:15:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x9) fallocate(r0, 0x0, 0x0, 0x8800000) accept4(r0, &(0x7f0000000580)=@alg, &(0x7f0000000140)=0xfe36, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe66e1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) ftruncate(r1, 0x4d0) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r1) statx(r1, &(0x7f0000000100)='./file0/../file0\x00', 0x400, 0x20, &(0x7f0000000180)) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x81000) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4d0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a70209008ae910cc949e255fa78a19b321af3fff33f00124e9c47967b59d55383e48c12e6fc66e27a955118cb9f74214bb26b689d957bee74c215c73979af06e5e37da8cb9d849f62d02330996b952d247cfba686a8eda9d262809da81c86104c203771323b12cf04ec365a0781ab10ad7a30852b8d9de10fa46891e96156457dcf1ac3edef0d82ef5d13fd079ed7dd7f2c5d2a2c8e594dd06a4e289cc6358b3c895e20000ee0f742a27a24328c09a88a2e0bf7d2cc987006885d326bee9eb1ba96b965f4f198257b04951451050b9bb24bec52df170aa39f59cef2dd925a2015f4f43e4a85819bb4e26ddadeb7a8d95a35392e25ed5b5698c8a6f9c3dd64cc03dc20ca546765ebc125074332b", @ANYRES16=r2, @ANYBLOB="00082bbd7000fddbdf250100000014000900fe8000000000000000000000000000bb04000500060001004e2000000400050008000600ac1414bb"], 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x1) mount_setattr(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8100, &(0x7f0000000340)={0x6, 0x6, 0x100000}, 0x20) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000280)=0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4e25, @empty}, {0x2, 0x0, @dev}, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x200000000800, 0x7}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x100000) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20000000) 00:15:53 executing program 1: syz_io_uring_setup(0x76a9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb) 00:15:58 executing program 1: syz_io_uring_setup(0x76a9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb) 00:15:59 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500), 0x111}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500), 0x111}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 00:16:03 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500), 0x111}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500), 0x111}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 00:16:03 executing program 1: syz_io_uring_setup(0x76a9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb) 00:16:06 executing program 1: syz_io_uring_setup(0x76a9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb) 00:16:07 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500), 0x111}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500), 0x111}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 00:16:12 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500), 0x111}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500), 0x111}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 00:16:12 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500), 0x111}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500), 0x111}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 00:16:14 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500), 0x111}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500), 0x111}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 00:16:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}}, 0x0) 00:16:19 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500), 0x111}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500), 0x111}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 00:16:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}}, 0x0) 00:16:25 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}}, 0x0) 00:16:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}}, 0x0) 00:16:29 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}}, 0x0) 00:16:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}}, 0x0) 00:16:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}}, 0x0) 00:16:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}}, 0x0) 00:16:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x0, {}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) 00:16:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}}, 0x0) 00:16:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x0, {}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) 00:16:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}}, 0x0) 00:16:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x0, {}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) 00:16:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x0, {}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) 00:16:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 00:16:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 00:16:51 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12021, 0x0) sendto$inet(r0, &(0x7f0000000200)='u', 0x34000, 0x0, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10) shutdown(r0, 0x1) 00:16:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 00:16:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 00:16:55 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12021, 0x0) sendto$inet(r0, &(0x7f0000000200)='u', 0x34000, 0x0, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10) shutdown(r0, 0x1) [ 1017.379877][ C1] hrtimer: interrupt took 1241100 ns 00:16:58 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12021, 0x0) sendto$inet(r0, &(0x7f0000000200)='u', 0x34000, 0x0, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10) shutdown(r0, 0x1) 00:16:59 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12021, 0x0) sendto$inet(r0, &(0x7f0000000200)='u', 0x34000, 0x0, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10) shutdown(r0, 0x1) 00:17:01 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12021, 0x0) sendto$inet(r0, &(0x7f0000000200)='u', 0x34000, 0x0, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10) shutdown(r0, 0x1) 00:17:03 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12021, 0x0) sendto$inet(r0, &(0x7f0000000200)='u', 0x34000, 0x0, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10) shutdown(r0, 0x1) 00:17:05 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12021, 0x0) sendto$inet(r0, &(0x7f0000000200)='u', 0x34000, 0x0, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10) shutdown(r0, 0x1) 00:17:06 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12021, 0x0) sendto$inet(r0, &(0x7f0000000200)='u', 0x34000, 0x0, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10) shutdown(r0, 0x1) 00:17:11 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12021, 0x0) sendto$inet(r0, &(0x7f0000000200)='u', 0x34000, 0x0, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10) shutdown(r0, 0x1) 00:17:11 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x51}}) 00:17:14 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x51}}) 00:17:14 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12021, 0x0) sendto$inet(r0, &(0x7f0000000200)='u', 0x34000, 0x0, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10) shutdown(r0, 0x1) 00:17:16 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x51}}) 00:17:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000104c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) 00:17:19 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x51}}) 00:17:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000104c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) 00:17:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20}, {0x6}]}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@ipv6_newrule={0x1c, 0x20, 0x984}, 0x1c}}, 0x0) 00:17:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000104c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) 00:17:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20}, {0x6}]}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@ipv6_newrule={0x1c, 0x20, 0x984}, 0x1c}}, 0x0) 00:17:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000104c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) 00:17:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20}, {0x6}]}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@ipv6_newrule={0x1c, 0x20, 0x984}, 0x1c}}, 0x0) 00:17:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20}, {0x6}]}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@ipv6_newrule={0x1c, 0x20, 0x984}, 0x1c}}, 0x0) 00:17:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20}, {0x6}]}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@ipv6_newrule={0x1c, 0x20, 0x984}, 0x1c}}, 0x0) 00:17:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20}, {0x6}]}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@ipv6_newrule={0x1c, 0x20, 0x984}, 0x1c}}, 0x0) 00:17:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002200c1d2"], 0x1c}}, 0x0) 00:17:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002200c1d2"], 0x1c}}, 0x0) 00:17:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20}, {0x6}]}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@ipv6_newrule={0x1c, 0x20, 0x984}, 0x1c}}, 0x0) 00:17:42 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) read$dsp(r0, &(0x7f0000000000)=""/176, 0xb0) 00:17:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002200c1d2"], 0x1c}}, 0x0) 00:17:45 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) read$dsp(r0, &(0x7f0000000000)=""/176, 0xb0) 00:17:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002200c1d2"], 0x1c}}, 0x0) 00:17:49 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) read$dsp(r0, &(0x7f0000000000)=""/176, 0xb0) 00:17:50 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) read$dsp(r0, &(0x7f0000000000)=""/176, 0xb0) 00:17:52 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) read$dsp(r0, &(0x7f0000000000)=""/176, 0xb0) 00:17:52 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) read$dsp(r0, &(0x7f0000000000)=""/176, 0xb0) 00:17:54 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) read$dsp(r0, &(0x7f0000000000)=""/176, 0xb0) 00:17:55 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) read$dsp(r0, &(0x7f0000000000)=""/176, 0xb0) 00:17:58 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) read$dsp(r0, &(0x7f0000000000)=""/176, 0xb0) 00:17:59 executing program 0: r0 = landlock_create_ruleset(&(0x7f0000001580)={0x12e4}, 0x8, 0x0) writev(r0, &(0x7f0000001480)=[{&(0x7f0000000040)="a2", 0x1}], 0x1) 00:18:01 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) read$dsp(r0, &(0x7f0000000000)=""/176, 0xb0) 00:18:01 executing program 0: r0 = landlock_create_ruleset(&(0x7f0000001580)={0x12e4}, 0x8, 0x0) writev(r0, &(0x7f0000001480)=[{&(0x7f0000000040)="a2", 0x1}], 0x1) 00:18:04 executing program 0: r0 = landlock_create_ruleset(&(0x7f0000001580)={0x12e4}, 0x8, 0x0) writev(r0, &(0x7f0000001480)=[{&(0x7f0000000040)="a2", 0x1}], 0x1) 00:18:06 executing program 1: capset(&(0x7f0000002240)={0x20080522}, &(0x7f0000002280)={0x0, 0x6e2812b5}) 00:18:07 executing program 0: r0 = landlock_create_ruleset(&(0x7f0000001580)={0x12e4}, 0x8, 0x0) writev(r0, &(0x7f0000001480)=[{&(0x7f0000000040)="a2", 0x1}], 0x1) 00:18:08 executing program 1: capset(&(0x7f0000002240)={0x20080522}, &(0x7f0000002280)={0x0, 0x6e2812b5}) 00:18:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000001380)={0x0, 0x0, 0x3}) 00:18:10 executing program 1: capset(&(0x7f0000002240)={0x20080522}, &(0x7f0000002280)={0x0, 0x6e2812b5}) 00:18:12 executing program 1: capset(&(0x7f0000002240)={0x20080522}, &(0x7f0000002280)={0x0, 0x6e2812b5}) 00:18:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000001380)={0x0, 0x0, 0x3}) 00:18:16 executing program 1: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) ioctl$NS_GET_PARENT(r1, 0x5460, 0xec000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0xa}, @IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x0) 00:18:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000001380)={0x0, 0x0, 0x3}) 00:18:23 executing program 1: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) ioctl$NS_GET_PARENT(r1, 0x5460, 0xec000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0xa}, @IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x0) 00:18:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000001380)={0x0, 0x0, 0x3}) 00:18:29 executing program 1: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) ioctl$NS_GET_PARENT(r1, 0x5460, 0xec000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0xa}, @IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x0) 00:18:31 executing program 0: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) ioctl$NS_GET_PARENT(r1, 0x5460, 0xec000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0xa}, @IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x0) 00:18:34 executing program 1: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) ioctl$NS_GET_PARENT(r1, 0x5460, 0xec000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0xa}, @IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x0) 00:18:37 executing program 0: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) ioctl$NS_GET_PARENT(r1, 0x5460, 0xec000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0xa}, @IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x0) 00:18:42 executing program 1: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) ioctl$NS_GET_PARENT(r1, 0x5460, 0xec000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0xa}, @IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x0) 00:18:42 executing program 0: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) ioctl$NS_GET_PARENT(r1, 0x5460, 0xec000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0xa}, @IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x0) 00:18:45 executing program 1: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) ioctl$NS_GET_PARENT(r1, 0x5460, 0xec000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0xa}, @IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x0) 00:18:48 executing program 0: io_setup(0x8, &(0x7f0000000040)=0x0) r1 = memfd_create(&(0x7f0000000140)='.pending_reads\x00', 0x6) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, r1, 0x0}]) 00:18:49 executing program 1: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) ioctl$NS_GET_PARENT(r1, 0x5460, 0xec000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0xa}, @IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x0) 00:18:52 executing program 0: io_setup(0x8, &(0x7f0000000040)=0x0) r1 = memfd_create(&(0x7f0000000140)='.pending_reads\x00', 0x6) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, r1, 0x0}]) 00:18:53 executing program 1: io_setup(0x8, &(0x7f0000000040)=0x0) r1 = memfd_create(&(0x7f0000000140)='.pending_reads\x00', 0x6) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, r1, 0x0}]) 00:18:54 executing program 0: io_setup(0x8, &(0x7f0000000040)=0x0) r1 = memfd_create(&(0x7f0000000140)='.pending_reads\x00', 0x6) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, r1, 0x0}]) 00:18:56 executing program 1: io_setup(0x8, &(0x7f0000000040)=0x0) r1 = memfd_create(&(0x7f0000000140)='.pending_reads\x00', 0x6) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, r1, 0x0}]) 00:18:57 executing program 0: io_setup(0x8, &(0x7f0000000040)=0x0) r1 = memfd_create(&(0x7f0000000140)='.pending_reads\x00', 0x6) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, r1, 0x0}]) 00:18:59 executing program 1: io_setup(0x8, &(0x7f0000000040)=0x0) r1 = memfd_create(&(0x7f0000000140)='.pending_reads\x00', 0x6) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, r1, 0x0}]) 00:19:01 executing program 0: io_setup(0x8, &(0x7f0000000040)=0x0) r1 = memfd_create(&(0x7f0000000140)='.pending_reads\x00', 0x6) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, r1, 0x0}]) 00:19:03 executing program 1: mlock2(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) 00:19:03 executing program 0: io_setup(0x8, &(0x7f0000000040)=0x0) r1 = memfd_create(&(0x7f0000000140)='.pending_reads\x00', 0x6) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, r1, 0x0}]) 00:19:05 executing program 1: mlock2(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) 00:19:05 executing program 0: io_setup(0x8, &(0x7f0000000040)=0x0) r1 = memfd_create(&(0x7f0000000140)='.pending_reads\x00', 0x6) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, r1, 0x0}]) 00:19:07 executing program 1: mlock2(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) 00:19:09 executing program 0: mlock2(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) 00:19:11 executing program 1: mlock2(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) 00:19:12 executing program 0: mlock2(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) 00:19:14 executing program 1: r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffa}) 00:19:15 executing program 0: mlock2(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) 00:19:16 executing program 1: r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffa}) 00:19:19 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "84e101faf8e1cadca9eccd2141028fc5bd22454c2e1be90a4de34657db03825b", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)=[{}]}) 00:19:19 executing program 1: r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffa}) 00:19:21 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "84e101faf8e1cadca9eccd2141028fc5bd22454c2e1be90a4de34657db03825b", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)=[{}]}) 00:19:22 executing program 1: r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffa}) 00:19:24 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "84e101faf8e1cadca9eccd2141028fc5bd22454c2e1be90a4de34657db03825b", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)=[{}]}) 00:19:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 00:19:27 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "84e101faf8e1cadca9eccd2141028fc5bd22454c2e1be90a4de34657db03825b", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)=[{}]}) 00:19:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 00:19:29 executing program 0: r0 = fanotify_init(0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00') close_range(r0, 0xffffffffffffffff, 0x0) 00:19:32 executing program 0: r0 = fanotify_init(0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00') close_range(r0, 0xffffffffffffffff, 0x0) 00:19:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 00:19:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 00:19:35 executing program 0: r0 = fanotify_init(0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00') close_range(r0, 0xffffffffffffffff, 0x0) 00:19:38 executing program 0: r0 = fanotify_init(0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00') close_range(r0, 0xffffffffffffffff, 0x0) 00:19:39 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x5421, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) connect$l2tp(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000080)="c0d48b81160e89d6f7c36144760ed10a", 0x10) 00:19:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d04000000000000000001000000080005000100000014000200776730000000000000000000000000004c000880"], 0x7c}}, 0x0) 00:19:43 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x5421, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) connect$l2tp(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000080)="c0d48b81160e89d6f7c36144760ed10a", 0x10) 00:19:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d04000000000000000001000000080005000100000014000200776730000000000000000000000000004c000880"], 0x7c}}, 0x0) 00:19:46 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x5421, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) connect$l2tp(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000080)="c0d48b81160e89d6f7c36144760ed10a", 0x10) 00:19:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d04000000000000000001000000080005000100000014000200776730000000000000000000000000004c000880"], 0x7c}}, 0x0) 00:19:50 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x5421, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) connect$l2tp(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000080)="c0d48b81160e89d6f7c36144760ed10a", 0x10) 00:19:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d04000000000000000001000000080005000100000014000200776730000000000000000000000000004c000880"], 0x7c}}, 0x0) 00:19:54 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x5421, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) connect$l2tp(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000080)="c0d48b81160e89d6f7c36144760ed10a", 0x10) 00:19:55 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @private}, 0x10) 00:19:58 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @private}, 0x10) 00:19:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x5421, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) connect$l2tp(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000080)="c0d48b81160e89d6f7c36144760ed10a", 0x10) 00:20:00 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @private}, 0x10) 00:20:01 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x5421, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) connect$l2tp(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000080)="c0d48b81160e89d6f7c36144760ed10a", 0x10) 00:20:03 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @private}, 0x10) 00:20:04 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fstatfs(r0, &(0x7f0000000140)=""/202) 00:20:06 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fstatfs(r0, &(0x7f0000000140)=""/202) 00:20:06 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8081, 0x0) write$sequencer(r0, &(0x7f0000000100)=[@s={0x5, @SEQ_MIDIPUTC=0xb3}], 0x4) 00:20:09 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fstatfs(r0, &(0x7f0000000140)=""/202) 00:20:09 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8081, 0x0) write$sequencer(r0, &(0x7f0000000100)=[@s={0x5, @SEQ_MIDIPUTC=0xb3}], 0x4) 00:20:12 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8081, 0x0) write$sequencer(r0, &(0x7f0000000100)=[@s={0x5, @SEQ_MIDIPUTC=0xb3}], 0x4) 00:20:13 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fstatfs(r0, &(0x7f0000000140)=""/202) 00:20:15 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8081, 0x0) write$sequencer(r0, &(0x7f0000000100)=[@s={0x5, @SEQ_MIDIPUTC=0xb3}], 0x4) 00:20:15 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8081, 0x0) write$sequencer(r0, &(0x7f0000000100)=[@s={0x5, @SEQ_MIDIPUTC=0xb3}], 0x4) 00:20:17 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8081, 0x0) write$sequencer(r0, &(0x7f0000000100)=[@s={0x5, @SEQ_MIDIPUTC=0xb3}], 0x4) 00:20:19 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x7, 0x4, 0xfff, 0x8000, 'syz0\x00', 0x2}, 0x1, 0x0, 0x1, r1, 0x1, 0x2, 'syz0\x00', &(0x7f0000000180)=[':\x00'], 0x2}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp6\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000080)=0xfffffffc) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0x80000000, 0x8, [0x0, 0x0]}) io_setup(0x5, &(0x7f0000001500)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r3, 0x2, &(0x7f0000000b00)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0xfffffffffffffffd}]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0xfffffffb}}, './file0\x00'}) 00:20:24 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8081, 0x0) write$sequencer(r0, &(0x7f0000000100)=[@s={0x5, @SEQ_MIDIPUTC=0xb3}], 0x4) 00:20:25 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x7, 0x4, 0xfff, 0x8000, 'syz0\x00', 0x2}, 0x1, 0x0, 0x1, r1, 0x1, 0x2, 'syz0\x00', &(0x7f0000000180)=[':\x00'], 0x2}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp6\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000080)=0xfffffffc) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0x80000000, 0x8, [0x0, 0x0]}) io_setup(0x5, &(0x7f0000001500)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r3, 0x2, &(0x7f0000000b00)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0xfffffffffffffffd}]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0xfffffffb}}, './file0\x00'}) 00:20:31 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x7, 0x4, 0xfff, 0x8000, 'syz0\x00', 0x2}, 0x1, 0x0, 0x1, r1, 0x1, 0x2, 'syz0\x00', &(0x7f0000000180)=[':\x00'], 0x2}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp6\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000080)=0xfffffffc) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0x80000000, 0x8, [0x0, 0x0]}) io_setup(0x5, &(0x7f0000001500)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r3, 0x2, &(0x7f0000000b00)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0xfffffffffffffffd}]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0xfffffffb}}, './file0\x00'}) 00:20:31 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x7, 0x4, 0xfff, 0x8000, 'syz0\x00', 0x2}, 0x1, 0x0, 0x1, r1, 0x1, 0x2, 'syz0\x00', &(0x7f0000000180)=[':\x00'], 0x2}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp6\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000080)=0xfffffffc) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0x80000000, 0x8, [0x0, 0x0]}) io_setup(0x5, &(0x7f0000001500)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r3, 0x2, &(0x7f0000000b00)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0xfffffffffffffffd}]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0xfffffffb}}, './file0\x00'}) 00:20:34 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x7, 0x4, 0xfff, 0x8000, 'syz0\x00', 0x2}, 0x1, 0x0, 0x1, r1, 0x1, 0x2, 'syz0\x00', &(0x7f0000000180)=[':\x00'], 0x2}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp6\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000080)=0xfffffffc) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0x80000000, 0x8, [0x0, 0x0]}) io_setup(0x5, &(0x7f0000001500)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r3, 0x2, &(0x7f0000000b00)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0xfffffffffffffffd}]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0xfffffffb}}, './file0\x00'}) 00:20:34 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x7, 0x4, 0xfff, 0x8000, 'syz0\x00', 0x2}, 0x1, 0x0, 0x1, r1, 0x1, 0x2, 'syz0\x00', &(0x7f0000000180)=[':\x00'], 0x2}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp6\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000080)=0xfffffffc) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0x80000000, 0x8, [0x0, 0x0]}) io_setup(0x5, &(0x7f0000001500)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r3, 0x2, &(0x7f0000000b00)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0xfffffffffffffffd}]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0xfffffffb}}, './file0\x00'}) 00:20:38 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x7, 0x4, 0xfff, 0x8000, 'syz0\x00', 0x2}, 0x1, 0x0, 0x1, r1, 0x1, 0x2, 'syz0\x00', &(0x7f0000000180)=[':\x00'], 0x2}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp6\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000080)=0xfffffffc) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0x80000000, 0x8, [0x0, 0x0]}) io_setup(0x5, &(0x7f0000001500)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r3, 0x2, &(0x7f0000000b00)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0xfffffffffffffffd}]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0xfffffffb}}, './file0\x00'}) 00:20:39 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x7, 0x4, 0xfff, 0x8000, 'syz0\x00', 0x2}, 0x1, 0x0, 0x1, r1, 0x1, 0x2, 'syz0\x00', &(0x7f0000000180)=[':\x00'], 0x2}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp6\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000080)=0xfffffffc) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0x80000000, 0x8, [0x0, 0x0]}) io_setup(0x5, &(0x7f0000001500)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r3, 0x2, &(0x7f0000000b00)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0xfffffffffffffffd}]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0xfffffffb}}, './file0\x00'}) [ 1241.676558][ T3259] snd_virmidi snd_virmidi.0: control 4:4095:32768:syz0:2 is already present 00:20:42 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x7, 0x4, 0xfff, 0x8000, 'syz0\x00', 0x2}, 0x1, 0x0, 0x1, r1, 0x1, 0x2, 'syz0\x00', &(0x7f0000000180)=[':\x00'], 0x2}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp6\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000080)=0xfffffffc) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0x80000000, 0x8, [0x0, 0x0]}) io_setup(0x5, &(0x7f0000001500)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r3, 0x2, &(0x7f0000000b00)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0xfffffffffffffffd}]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0xfffffffb}}, './file0\x00'}) 00:20:43 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x7, 0x4, 0xfff, 0x8000, 'syz0\x00', 0x2}, 0x1, 0x0, 0x1, r1, 0x1, 0x2, 'syz0\x00', &(0x7f0000000180)=[':\x00'], 0x2}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp6\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000080)=0xfffffffc) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0x80000000, 0x8, [0x0, 0x0]}) io_setup(0x5, &(0x7f0000001500)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r3, 0x2, &(0x7f0000000b00)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0xfffffffffffffffd}]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0xfffffffb}}, './file0\x00'}) [ 1245.256565][ T3261] snd_virmidi snd_virmidi.0: control 4:4095:32768:syz0:2 is already present [ 1245.802615][ T3263] snd_virmidi snd_virmidi.0: control 4:4095:32768:syz0:2 is already present 00:20:45 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x7, 0x4, 0xfff, 0x8000, 'syz0\x00', 0x2}, 0x1, 0x0, 0x1, r1, 0x1, 0x2, 'syz0\x00', &(0x7f0000000180)=[':\x00'], 0x2}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp6\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000080)=0xfffffffc) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0x80000000, 0x8, [0x0, 0x0]}) io_setup(0x5, &(0x7f0000001500)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r3, 0x2, &(0x7f0000000b00)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0xfffffffffffffffd}]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0xfffffffb}}, './file0\x00'}) 00:20:46 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x7, 0x4, 0xfff, 0x8000, 'syz0\x00', 0x2}, 0x1, 0x0, 0x1, r1, 0x1, 0x2, 'syz0\x00', &(0x7f0000000180)=[':\x00'], 0x2}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp6\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000080)=0xfffffffc) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0x80000000, 0x8, [0x0, 0x0]}) io_setup(0x5, &(0x7f0000001500)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r3, 0x2, &(0x7f0000000b00)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0xfffffffffffffffd}]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0xfffffffb}}, './file0\x00'}) [ 1248.454836][ T3265] snd_virmidi snd_virmidi.0: control 4:4095:32768:syz0:2 is already present [ 1249.434835][ T3267] snd_virmidi snd_virmidi.0: control 4:4095:32768:syz0:2 is already present 00:20:49 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x7, 0x4, 0xfff, 0x8000, 'syz0\x00', 0x2}, 0x1, 0x0, 0x1, r1, 0x1, 0x2, 'syz0\x00', &(0x7f0000000180)=[':\x00'], 0x2}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp6\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000080)=0xfffffffc) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0x80000000, 0x8, [0x0, 0x0]}) io_setup(0x5, &(0x7f0000001500)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r3, 0x2, &(0x7f0000000b00)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0xfffffffffffffffd}]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0xfffffffb}}, './file0\x00'}) 00:20:50 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x7, 0x4, 0xfff, 0x8000, 'syz0\x00', 0x2}, 0x1, 0x0, 0x1, r1, 0x1, 0x2, 'syz0\x00', &(0x7f0000000180)=[':\x00'], 0x2}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp6\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000080)=0xfffffffc) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0x80000000, 0x8, [0x0, 0x0]}) io_setup(0x5, &(0x7f0000001500)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r3, 0x2, &(0x7f0000000b00)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0xfffffffffffffffd}]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0xfffffffb}}, './file0\x00'}) [ 1252.217448][ T3269] snd_virmidi snd_virmidi.0: control 4:4095:32768:syz0:2 is already present [ 1253.042836][ T3271] snd_virmidi snd_virmidi.0: control 4:4095:32768:syz0:2 is already present 00:20:53 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x7, 0x4, 0xfff, 0x8000, 'syz0\x00', 0x2}, 0x1, 0x0, 0x1, r1, 0x1, 0x2, 'syz0\x00', &(0x7f0000000180)=[':\x00'], 0x2}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp6\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000080)=0xfffffffc) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0x80000000, 0x8, [0x0, 0x0]}) io_setup(0x5, &(0x7f0000001500)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r3, 0x2, &(0x7f0000000b00)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0xfffffffffffffffd}]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0xfffffffb}}, './file0\x00'}) 00:20:55 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002180)=ANY=[@ANYBLOB="020a000007"], 0x38}}, 0x0) clock_gettime(0x0, &(0x7f0000002040)) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0) [ 1257.384436][ T3274] snd_virmidi snd_virmidi.0: control 4:4095:32768:syz0:2 is already present 00:20:58 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x7, 0x4, 0xfff, 0x8000, 'syz0\x00', 0x2}, 0x1, 0x0, 0x1, r1, 0x1, 0x2, 'syz0\x00', &(0x7f0000000180)=[':\x00'], 0x2}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp6\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000080)=0xfffffffc) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0x80000000, 0x8, [0x0, 0x0]}) io_setup(0x5, &(0x7f0000001500)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r3, 0x2, &(0x7f0000000b00)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0xfffffffffffffffd}]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0xfffffffb}}, './file0\x00'}) 00:20:58 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002180)=ANY=[@ANYBLOB="020a000007"], 0x38}}, 0x0) clock_gettime(0x0, &(0x7f0000002040)) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0) [ 1260.944335][ T3279] snd_virmidi snd_virmidi.0: control 4:4095:32768:syz0:2 is already present 00:21:02 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002180)=ANY=[@ANYBLOB="020a000007"], 0x38}}, 0x0) clock_gettime(0x0, &(0x7f0000002040)) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0) 00:21:02 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002180)=ANY=[@ANYBLOB="020a000007"], 0x38}}, 0x0) clock_gettime(0x0, &(0x7f0000002040)) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0) 00:21:05 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002180)=ANY=[@ANYBLOB="020a000007"], 0x38}}, 0x0) clock_gettime(0x0, &(0x7f0000002040)) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0) 00:21:05 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002180)=ANY=[@ANYBLOB="020a000007"], 0x38}}, 0x0) clock_gettime(0x0, &(0x7f0000002040)) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0) 00:21:08 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002180)=ANY=[@ANYBLOB="020a000007"], 0x38}}, 0x0) clock_gettime(0x0, &(0x7f0000002040)) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0) 00:21:09 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002180)=ANY=[@ANYBLOB="020a000007"], 0x38}}, 0x0) clock_gettime(0x0, &(0x7f0000002040)) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0) 00:21:13 executing program 0: keyctl$dh_compute(0x17, &(0x7f0000000940), 0x0, 0x4, &(0x7f0000000ac0)={0x0}) 00:21:13 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002180)=ANY=[@ANYBLOB="020a000007"], 0x38}}, 0x0) clock_gettime(0x0, &(0x7f0000002040)) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0) 00:21:16 executing program 0: keyctl$dh_compute(0x17, &(0x7f0000000940), 0x0, 0x4, &(0x7f0000000ac0)={0x0}) 00:21:17 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002180)=ANY=[@ANYBLOB="020a000007"], 0x38}}, 0x0) clock_gettime(0x0, &(0x7f0000002040)) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0) 00:21:19 executing program 0: keyctl$dh_compute(0x17, &(0x7f0000000940), 0x0, 0x4, &(0x7f0000000ac0)={0x0}) 00:21:21 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:21:22 executing program 0: keyctl$dh_compute(0x17, &(0x7f0000000940), 0x0, 0x4, &(0x7f0000000ac0)={0x0}) 00:21:26 executing program 0: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, &(0x7f0000000040), 0x4) 00:21:30 executing program 0: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, &(0x7f0000000040), 0x4) 00:21:30 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:21:33 executing program 0: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, &(0x7f0000000040), 0x4) 00:21:37 executing program 0: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, &(0x7f0000000040), 0x4) [ 1301.411550][ T3322] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1301.415763][ T3322] [ 1301.416134][ T3322] ====================================================== [ 1301.417095][ T3322] WARNING: possible circular locking dependency detected [ 1301.417869][ T3322] 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 Not tainted [ 1301.418773][ T3322] ------------------------------------------------------ [ 1301.420619][ T3322] syz-executor.1/3322 is trying to acquire lock: [ 1301.422451][ T3322] ffffffff84fc0408 (nci_mutex){+.+.}-{3:3}, at: virtual_nci_close+0x28/0x58 [ 1301.425637][ T3322] [ 1301.425637][ T3322] but task is already holding lock: [ 1301.426443][ T3322] ffffaf8020c6f350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_close_device+0x52/0x1de [ 1301.428478][ T3322] [ 1301.428478][ T3322] which lock already depends on the new lock. [ 1301.428478][ T3322] [ 1301.430079][ T3322] [ 1301.430079][ T3322] the existing dependency chain (in reverse order) is: [ 1301.431025][ T3322] [ 1301.431025][ T3322] -> #3 (&ndev->req_lock){+.+.}-{3:3}: [ 1301.432581][ T3322] lock_acquire.part.0+0x1d0/0x424 [ 1301.434163][ T3322] lock_acquire+0x54/0x6a [ 1301.435047][ T3322] __mutex_lock+0x114/0xade [ 1301.436012][ T3322] mutex_lock_nested+0x14/0x1c [ 1301.437597][ T3322] nci_start_poll+0x4de/0x6b8 [ 1301.438480][ T3322] nfc_start_poll+0x10c/0x1e8 [ 1301.439367][ T3322] nfc_genl_start_poll+0xfe/0x252 [ 1301.440203][ T3322] genl_family_rcv_msg_doit+0x19a/0x23c [ 1301.440871][ T3322] genl_rcv_msg+0x236/0x3ba [ 1301.441647][ T3322] netlink_rcv_skb+0xf8/0x2be [ 1301.442257][ T3322] genl_rcv+0x36/0x4c [ 1301.443006][ T3322] netlink_unicast+0x40e/0x5fe [ 1301.443639][ T3322] netlink_sendmsg+0x4e0/0x994 [ 1301.444253][ T3322] sock_sendmsg+0xa0/0xc4 [ 1301.445004][ T3322] ____sys_sendmsg+0x46e/0x484 [ 1301.445748][ T3322] ___sys_sendmsg+0x16c/0x1f6 [ 1301.446449][ T3322] __sys_sendmsg+0xba/0x150 [ 1301.447127][ T3322] sys_sendmsg+0x2c/0x3a [ 1301.448437][ T3322] ret_from_syscall+0x0/0x2 [ 1301.449275][ T3322] [ 1301.449275][ T3322] -> #2 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 1301.451254][ T3322] lock_acquire.part.0+0x1d0/0x424 [ 1301.452184][ T3322] lock_acquire+0x54/0x6a [ 1301.453004][ T3322] __mutex_lock+0x114/0xade [ 1301.454148][ T3322] mutex_lock_nested+0x14/0x1c [ 1301.455004][ T3322] nfc_urelease_event_work+0x126/0x218 [ 1301.455811][ T3322] process_one_work+0x654/0xffe [ 1301.456947][ T3322] worker_thread+0x360/0x8fa [ 1301.457824][ T3322] kthread+0x19e/0x1fa [ 1301.458576][ T3322] ret_from_exception+0x0/0x10 [ 1301.459830][ T3322] [ 1301.459830][ T3322] -> #1 (nfc_devlist_mutex){+.+.}-{3:3}: [ 1301.461023][ T3322] lock_acquire.part.0+0x1d0/0x424 [ 1301.461817][ T3322] lock_acquire+0x54/0x6a [ 1301.462832][ T3322] __mutex_lock+0x114/0xade [ 1301.463598][ T3322] mutex_lock_nested+0x14/0x1c [ 1301.464463][ T3322] nfc_register_device+0x44/0x29e [ 1301.465860][ T3322] nci_register_device+0x538/0x612 [ 1301.466681][ T3322] virtual_ncidev_open+0x82/0x12c [ 1301.467442][ T3322] misc_open+0x272/0x2c8 [ 1301.468856][ T3322] chrdev_open+0x1d4/0x478 [ 1301.469743][ T3322] do_dentry_open+0x2a4/0x7d4 [ 1301.470370][ T3322] vfs_open+0x52/0x5e [ 1301.470951][ T3322] path_openat+0x12b6/0x189e [ 1301.471634][ T3322] do_filp_open+0x10e/0x22a [ 1301.472335][ T3322] do_sys_openat2+0x174/0x31e [ 1301.472984][ T3322] sys_openat+0xdc/0x164 [ 1301.473615][ T3322] ret_from_syscall+0x0/0x2 [ 1301.474535][ T3322] [ 1301.474535][ T3322] -> #0 (nci_mutex){+.+.}-{3:3}: [ 1301.475499][ T3322] check_noncircular+0x1de/0x1fe [ 1301.476156][ T3322] __lock_acquire+0x19a4/0x333e [ 1301.476817][ T3322] lock_acquire.part.0+0x1d0/0x424 [ 1301.477524][ T3322] lock_acquire+0x54/0x6a [ 1301.478108][ T3322] __mutex_lock+0x114/0xade [ 1301.478978][ T3322] mutex_lock_nested+0x14/0x1c [ 1301.479621][ T3322] virtual_nci_close+0x28/0x58 [ 1301.480271][ T3322] nci_close_device+0x12e/0x1de [ 1301.480884][ T3322] nci_unregister_device+0x34/0x182 [ 1301.481882][ T3322] virtual_ncidev_close+0x9c/0xbc [ 1301.482649][ T3322] __fput+0x164/0x502 [ 1301.483195][ T3322] ____fput+0x1a/0x24 [ 1301.483934][ T3322] task_work_run+0xdc/0x154 [ 1301.484582][ T3322] do_notify_resume+0x894/0xa56 [ 1301.485384][ T3322] ret_from_exception+0x0/0x10 [ 1301.486254][ T3322] [ 1301.486254][ T3322] other info that might help us debug this: [ 1301.486254][ T3322] [ 1301.487404][ T3322] Chain exists of: [ 1301.487404][ T3322] nci_mutex --> &genl_data->genl_data_mutex --> &ndev->req_lock [ 1301.487404][ T3322] [ 1301.490233][ T3322] Possible unsafe locking scenario: [ 1301.490233][ T3322] [ 1301.491615][ T3322] CPU0 CPU1 [ 1301.492315][ T3322] ---- ---- [ 1301.492859][ T3322] lock(&ndev->req_lock); [ 1301.496164][ T3322] lock(&genl_data->genl_data_mutex); [ 1301.497290][ T3322] lock(&ndev->req_lock); [ 1301.498210][ T3322] lock(nci_mutex); [ 1301.498983][ T3322] [ 1301.498983][ T3322] *** DEADLOCK *** [ 1301.498983][ T3322] [ 1301.500555][ T3322] 1 lock held by syz-executor.1/3322: [ 1301.501561][ T3322] #0: ffffaf8020c6f350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_close_device+0x52/0x1de [ 1301.503316][ T3322] [ 1301.503316][ T3322] stack backtrace: [ 1301.504703][ T3322] CPU: 1 PID: 3322 Comm: syz-executor.1 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 1301.505925][ T3322] Hardware name: riscv-virtio,qemu (DT) [ 1301.506794][ T3322] Call Trace: [ 1301.507668][ T3322] [] dump_backtrace+0x2e/0x3c [ 1301.508566][ T3322] [] show_stack+0x34/0x40 [ 1301.509939][ T3322] [] dump_stack_lvl+0xe4/0x150 [ 1301.511239][ T3322] [] dump_stack+0x1c/0x24 [ 1301.512103][ T3322] [] print_circular_bug+0x34e/0x3d8 [ 1301.513022][ T3322] [] check_noncircular+0x1de/0x1fe [ 1301.514441][ T3322] [] __lock_acquire+0x19a4/0x333e [ 1301.515331][ T3322] [] lock_acquire.part.0+0x1d0/0x424 [ 1301.516274][ T3322] [] lock_acquire+0x54/0x6a [ 1301.517442][ T3322] [] __mutex_lock+0x114/0xade [ 1301.518362][ T3322] [] mutex_lock_nested+0x14/0x1c [ 1301.519800][ T3322] [] virtual_nci_close+0x28/0x58 [ 1301.521220][ T3322] [] nci_close_device+0x12e/0x1de [ 1301.522194][ T3322] [] nci_unregister_device+0x34/0x182 [ 1301.523145][ T3322] [] virtual_ncidev_close+0x9c/0xbc [ 1301.524685][ T3322] [] __fput+0x164/0x502 [ 1301.525478][ T3322] [] ____fput+0x1a/0x24 [ 1301.526324][ T3322] [] task_work_run+0xdc/0x154 [ 1301.527591][ T3322] [] do_notify_resume+0x894/0xa56 [ 1301.528437][ T3322] [] ret_from_exception+0x0/0x10 00:21:41 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:21:41 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:21:44 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:21:45 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1310.030805][ T3337] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 00:21:49 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:21:49 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:21:51 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:21:52 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1317.551654][ T3354] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 00:21:56 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:21:56 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:21:59 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:22:00 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:22:01 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1325.070817][ T3371] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 00:22:04 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:22:04 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:22:05 executing program 0: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, &(0x7f0000000040), 0x4) 00:22:06 executing program 0: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, &(0x7f0000000040), 0x4) 00:22:06 executing program 0: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, &(0x7f0000000040), 0x4) VM DIAGNOSIS: 12:19:43 Registers: info registers vcpu 0 pc ffffffff80dc337e mhartid 0000000000000000 mstatus 00000000000000a0 mip 00000000000000a0 mie 000000000000022a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff801230c4 sepc ffffffff831a262c mcause 8000000000000007 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff80dc337e x2/sp ffffaf800c962fc0 x3/gp ffffffff85863ac0 x4/tp ffffaf800bd33080 x5/t0 ffffffff86bcb657 x6/t1 fffffffef0d796ca x7/t2 0000000000000000 x8/s0 ffffaf800c962ff0 x9/s1 ffffffff86e58900 x10/a0 ffffffff86e58948 x11/a1 ffff8f800066c000 x12/a2 1ffffffff0dcb129 x13/a3 ffffffff80dc337e x14/a4 0000000000000000 x15/a5 ffffffff86e58948 x16/a6 ffffffff86e589f1 x17/a7 ffffffff86bcb656 x18/s2 ffff8f800066c000 x19/s3 000000000000002d x20/s4 ffffffff86e58900 x21/s5 ffffffff80dc333e x22/s6 0000000000000000 x23/s7 ffffffff86bcb68e x24/s8 0000000000000010 x25/s9 ffffffff86e58958 x26/s10 0000000000000010 x27/s11 0000000000000000 x28/t3 000000000000002d x29/t4 fffffffef0d796c8 x30/t5 fffffffef0d796cb x31/t6 ffffffff86bcb657 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffff831afd08 mhartid 0000000000000001 mstatus 00000000000001a0 mip 00000000000000a0 mie 000000000000020a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff803d1fb6 sepc ffffffff803d1fb6 mcause 8000000000000007 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff831afd14 x2/sp ffffaf8010127090 x3/gp ffffffff85863ac0 x4/tp ffffaf800baeb080 x5/t0 0000000000046000 x6/t1 fffff5ef020d8028 x7/t2 00007fffcfccd1b7 x8/s0 ffffaf80101270b0 x9/s1 0000000000000000 x10/a0 ffffaf800d8d2180 x11/a1 0000000000000003 x12/a2 1ffff5f001b1a430 x13/a3 ffffffff80119e02 x14/a4 0000000000000000 x15/a5 0000000000000120 x16/a6 0000000000f00000 x17/a7 ffffaf80106c0147 x18/s2 ffffaf800d8d2180 x19/s3 ffffaf8010127140 x20/s4 1ffff5f002024e1c x21/s5 ffffffff85889780 x22/s6 ffffaf800d8d2180 x23/s7 ffffaf805a9d8c80 x24/s8 0000000000000120 x25/s9 ffffaf805a9d8c98 x26/s10 ffffaf800d8d1860 x27/s11 ffffffff86c1a620 x28/t3 000000007fffffff x29/t4 fffff5ef020d8028 x30/t5 fffff5ef020d8029 x31/t6 0000000000040000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000