110046a37b3489535ed813a310f3f8c6d2991312bb1ed7f9fe4f64089e4c47b2bcc97d6b2fb7687210769e507d4cbe8007ec4b4c20deedff05bde0eda131d75efec30120e9f16fae54ea60f3c9949b83577c55989ba60fd89fcfc4cf825785021079659b8d8347affd05b10bd5ac59e5", 0xf6}, {&(0x7f0000000880)="8f83b0562c3d2b7b131d70eeb155fa528150295705fa8523b798617d835ec0b3af378c30f6ff", 0x26}], 0x2, &(0x7f0000000900)={0x68, 0x10c, 0x8000, "ecf57d8f6f7a47831fb6b5c9a99d3a8708c95c34b4f3d9d2af7f674a0a75c3c3c33b746e0957d636601c8dc9b0153d7c9cbe4b16d5371817173e13d7ab9522c4a13ec2fd59c68232c350ab200539e1296bb909"}, 0x68, 0x400c841}], 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) syz_io_uring_setup(0x13e, &(0x7f0000000240)={0x0, 0x3c2d, 0x8, 0x0, 0x50, 0x0, r3}, &(0x7f00000002c0), &(0x7f0000000300)) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 07:59:25 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket$l2tp6(0xa, 0x2, 0x73) 07:59:25 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x84040, 0x0) 07:59:25 executing program 0: socket(0x26, 0x3, 0x1ff) 07:59:25 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0x5, 0x9, 0x21, @private1, @ipv4={'\x00', '\xff\xff', @empty}, 0x8000, 0x80, 0x6840, 0x13}}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) getpeername$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) 07:59:25 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0xfffffffffffffed9) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmmsg$nfc_llcp(r0, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r1, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:25 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x84040, 0x0) 07:59:26 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) 07:59:26 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053", 0x3e}, 0x60) 07:59:26 executing program 0: socket(0x0, 0x3, 0x1ff) 07:59:26 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) getpeername$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) 07:59:26 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0xfffffffffffffed9) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmmsg$nfc_llcp(r0, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r1, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:26 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept4(r0, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000140)=0x80, 0x80800) 07:59:26 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140), 0x10) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r2, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:26 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x84040, 0x0) 07:59:26 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) getpeername$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) 07:59:26 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x84040, 0x0) 07:59:26 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0xfffffffffffffed9) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmmsg$nfc_llcp(r0, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 07:59:26 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x1, 0x4, 0x100, 0xcd543c3ae4af82eb, r0, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x7}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%pi6 \x00'}, 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x11, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xdf7b, 0x0, 0x0, 0x0, 0x7c17a5a6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_fd={0x18, 0x0, 0x1, 0x0, r3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x76, 0x0, 0x0, 0x41100, 0x60, '\x00', r4, 0x25, r1, 0x8, &(0x7f0000000440)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0xc, 0x7fff, 0x2}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000500)=[r5, r0, r0, r0], &(0x7f0000000540)=[{0x5, 0x3, 0x4}, {0x1, 0x4, 0xe, 0x9}, {0x3, 0x5, 0xa, 0x4}, {0x4, 0x3, 0x1, 0x3}, {0x3, 0x2, 0xa, 0x8}], 0x10, 0xffffffff}, 0x90) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000140)=0x80, 0x80800) 07:59:26 executing program 0: socket(0x0, 0x3, 0x1ff) 07:59:26 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r0, 0x2f, 0x1, 0x100, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007000000000050000000b165e42bc8ae50000000080000001000000000000007000000000000000000000001000000000a0063010a00000001000004d700000000000000030000004b0000000c0000000000000e0100000000000000010000000000000b030000000061"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r1, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:26 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0xfffffffffffffed9) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmmsg$nfc_llcp(r0, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) 07:59:26 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpeername$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) 07:59:26 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r0, 0x2f, 0x1, 0x100, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007000000000050000000b165e42bc8ae50000000080000001000000000000007000000000000000000000001000000000a0063010a00000001000004d700000000000000030000004b0000000c0000000000000e0100000000000000010000000000000b030000000061"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r1, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:26 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpeername$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) 07:59:26 executing program 5: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x84040, 0x0) 07:59:26 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r0, 0x2f, 0x1, 0x100, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007000000000050000000b165e42bc8ae50000000080000001000000000000007000000000000000000000001000000000a0063010a00000001000004d700000000000000030000004b0000000c0000000000000e0100000000000000010000000000000b030000000061"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r1, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:26 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0xfffffffffffffed9) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmmsg$nfc_llcp(r0, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) 07:59:26 executing program 0: socket(0x0, 0x3, 0x1ff) 07:59:26 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpeername$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) 07:59:26 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r0, 0x2f, 0x1, 0x100, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007000000000050000000b165e42bc8ae50000000080000001000000000000007000000000000000000000001000000000a0063010a00000001000004d700000000000000030000004b0000000c0000000000000e0100000000000000010000000000000b030000000061"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r1, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:26 executing program 5: openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x84040, 0x0) 07:59:26 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0xfffffffffffffed9) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmmsg$nfc_llcp(r0, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 07:59:26 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r0, 0x2f, 0x1, 0x100, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007000000000050000000b165e42bc8ae50000000080000001000000000000007000000000000000000000001000000000a0063010a00000001000004d700000000000000030000004b0000000c0000000000000e0100000000000000010000000000000b030000000061"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r1, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:27 executing program 5: openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x84040, 0x0) 07:59:27 executing program 4: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) 07:59:27 executing program 0: socket(0x26, 0x0, 0x1ff) 07:59:27 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r0, 0x2f, 0x1, 0x100, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007000000000050000000b165e42bc8ae50000000080000001000000000000007000000000000000000000001000000000a0063010a00000001000004d700000000000000030000004b0000000c0000000000000e0100000000000000010000000000000b030000000061"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 07:59:27 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r0, 0x2f, 0x1, 0x100, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007000000000050000000b165e42bc8ae50000000080000001000000000000007000000000000000000000001000000000a0063010a00000001000004d700000000000000030000004b0000000c0000000000000e0100000000000000010000000000000b030000000061"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r1, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:27 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0xfffffffffffffed9) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmmsg$nfc_llcp(r0, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) 07:59:27 executing program 5: openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x84040, 0x0) 07:59:27 executing program 4: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) 07:59:27 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r0, 0x2f, 0x1, 0x100, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007000000000050000000b165e42bc8ae50000000080000001000000000000007000000000000000000000001000000000a0063010a00000001000004d700000000000000030000004b0000000c0000000000000e0100000000000000010000000000000b030000000061"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) 07:59:27 executing program 0: socket(0x26, 0x0, 0x0) 07:59:27 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r0, 0x2f, 0x1, 0x100, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007000000000050000000b165e42bc8ae50000000080000001000000000000007000000000000000000000001000000000a0063010a00000001000004d700000000000000030000004b0000000c0000000000000e0100000000000000010000000000000b030000000061"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 07:59:27 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0xfffffffffffffed9) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmmsg$nfc_llcp(r0, 0x0, 0x0, 0x0) 07:59:27 executing program 5: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 07:59:27 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r2, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r3 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r3, &(0x7f0000000180), 0x14) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r4, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r5, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, 0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966", 0x20000000004}, 0x60, 0x0}, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r6, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053", 0x3e}, 0x60) 07:59:27 executing program 4: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) 07:59:27 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r0, 0x2f, 0x1, 0x100, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007000000000050000000b165e42bc8ae50000000080000001000000000000007000000000000000000000001000000000a0063010a00000001000004d700000000000000030000004b0000000c0000000000000e0100000000000000010000000000000b030000000061"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) 07:59:27 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r0, 0x2f, 0x1, 0x100, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007000000000050000000b165e42bc8ae50000000080000001000000000000007000000000000000000000001000000000a0063010a00000001000004d700000000000000030000004b0000000c0000000000000e0100000000000000010000000000000b030000000061"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) 07:59:27 executing program 5: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 07:59:27 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000001c0)) 07:59:27 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0xfffffffffffffed9) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 07:59:27 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x1, 0x4, 0x100, 0xcd543c3ae4af82eb, r0, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x7}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%pi6 \x00'}, 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x11, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xdf7b, 0x0, 0x0, 0x0, 0x7c17a5a6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_fd={0x18, 0x0, 0x1, 0x0, r3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x76, 0x0, 0x0, 0x41100, 0x60, '\x00', r4, 0x25, r1, 0x8, &(0x7f0000000440)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0xc, 0x7fff, 0x2}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000500)=[r5, r0, r0, r0], &(0x7f0000000540)=[{0x5, 0x3, 0x4}, {0x1, 0x4, 0xe, 0x9}, {0x3, 0x5, 0xa, 0x4}, {0x4, 0x3, 0x1, 0x3}, {0x3, 0x2, 0xa, 0x8}], 0x10, 0xffffffff}, 0x90) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r6, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:27 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r0, 0x2f, 0x1, 0x100, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007000000000050000000b165e42bc8ae50000000080000001000000000000007000000000000000000000001000000000a0063010a00000001000004d700000000000000030000004b0000000c0000000000000e0100000000000000010000000000000b030000000061"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:27 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r0, 0x2f, 0x1, 0x100, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007000000000050000000b165e42bc8ae50000000080000001000000000000007000000000000000000000001000000000a0063010a00000001000004d700000000000000030000004b0000000c0000000000000e0100000000000000010000000000000b030000000061"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) 07:59:27 executing program 5: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 07:59:27 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0xfffffffffffffed9) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) 07:59:27 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r0, 0x2f, 0x1, 0x100, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007000000000050000000b165e42bc8ae50000000080000001000000000000007000000000000000000000001000000000a0063010a00000001000004d700000000000000030000004b0000000c0000000000000e0100000000000000010000000000000b030000000061"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:27 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240), 0x4) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r2, 0xc008af7b, &(0x7f0000000280)={0x3, 0xfffffffb}) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053", 0x3e}, 0x60) 07:59:27 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) getpeername$packet(r0, 0x0, 0x0) 07:59:27 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r0, 0x2f, 0x1, 0x100, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007000000000050000000b165e42bc8ae50000000080000001000000000000007000000000000000000000001000000000a0063010a00000001000004d700000000000000030000004b0000000c0000000000000e0100000000000000010000000000000b030000000061"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:27 executing program 5: socket$kcm(0x29, 0x0, 0x0) 07:59:27 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0xfffffffffffffed9) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) 07:59:27 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r0, 0x2f, 0x1, 0x100, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007000000000050000000b165e42bc8ae50000000080000001000000000000007000000000000000000000001000000000a0063010a00000001000004d700000000000000030000004b0000000c0000000000000e0100000000000000010000000000000b030000000061"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:27 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x28080, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$kcm(0x29, 0x2, 0x0) 07:59:27 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240), 0x4) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r2, 0xc008af7b, &(0x7f0000000280)={0x3, 0xfffffffb}) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053", 0x3e}, 0x60) 07:59:28 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0xfffffffffffffed9) 07:59:28 executing program 5: socket$kcm(0x29, 0x0, 0x0) 07:59:28 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r0, 0x2f, 0x1, 0x100, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 07:59:28 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007000000000050000000b165e42bc8ae50000000080000001000000000000007000000000000000000000001000000000a0063010a00000001000004d700000000000000030000004b0000000c0000000000000e0100000000000000010000000000000b030000000061"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:28 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240), 0x4) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r2, 0xc008af7b, &(0x7f0000000280)={0x3, 0xfffffffb}) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053", 0x3e}, 0x60) 07:59:28 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) getpeername$packet(r0, &(0x7f0000000240), &(0x7f0000000280)=0x14) 07:59:28 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r0, 0x2f, 0x1, 0x100, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 07:59:28 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007000000000050000000b165e42bc8ae50000000080000001000000000000007000000000000000000000001000000000a0063010a00000001000004d700000000000000030000004b0000000c0000000000000e0100000000000000010000000000000b030000000061"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:28 executing program 1: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0xfffffffffffffed9) 07:59:28 executing program 5: socket$kcm(0x29, 0x0, 0x0) 07:59:28 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) getpeername$packet(r0, &(0x7f0000000240), &(0x7f0000000280)=0x14) 07:59:28 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240), 0x4) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r2, 0xc008af7b, &(0x7f0000000280)={0x3, 0xfffffffb}) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 07:59:28 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007000000000050000000b165e42bc8ae50000000080000001000000000000007000000000000000000000001000000000a0063010a00000001000004d700000000000000030000004b0000000c0000000000000e0100000000000000010000000000000b030000000061"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:28 executing program 1: bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 07:59:28 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r0, 0x2f, 0x1, 0x100, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) 07:59:28 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) getpeername$packet(r0, &(0x7f0000000240), &(0x7f0000000280)=0x14) 07:59:28 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x28080, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) socket$kcm(0x29, 0x2, 0x0) 07:59:28 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007000000000050000000b165e42bc8ae50000000080000001000000000000007000000000000000000000001000000000a0063010a00000001000004d700000000000000030000004b0000000c0000000000000e0100000000000000010000000000000b030000000061"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:28 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240), 0x4) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r2, 0xc008af7b, &(0x7f0000000280)={0x3, 0xfffffffb}) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) 07:59:28 executing program 1: bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 07:59:28 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r0, 0x2f, 0x1, 0x100, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) 07:59:28 executing program 4: socket$packet(0x11, 0x0, 0x300) 07:59:28 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) r0 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r0, &(0x7f0000000240), &(0x7f0000000280)=0x14) 07:59:28 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007000000000050000000b165e42bc8ae50000000080000001000000000000007000000000000000000000001000000000a0063010a00000001000004d700000000000000030000004b0000000c0000000000000e0100000000000000010000000000000b030000000061"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:28 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r0, 0x2f, 0x1, 0x100, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) 07:59:28 executing program 1: bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 07:59:28 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240), 0x4) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r2, 0xc008af7b, &(0x7f0000000280)={0x3, 0xfffffffb}) 07:59:28 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240), 0x4) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r2, 0xc008af7b, &(0x7f0000000280)={0x3, 0xfffffffb}) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) 07:59:29 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) r0 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r0, &(0x7f0000000240), &(0x7f0000000280)=0x14) 07:59:29 executing program 3: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 07:59:29 executing program 1: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0xfffffffffffffed9) 07:59:29 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map, 0x2f, 0x1, 0x100, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) 07:59:29 executing program 3: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 07:59:29 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007000000000050000000b165e42bc8ae50000000080000001000000000000007000000000000000000000001000000000a0063010a00000001000004d700000000000000030000004b0000000c0000000000000e0100000000000000010000000000000b030000000061"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:29 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240), 0x4) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) 07:59:29 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map, 0x2f, 0x1, 0x100, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) 07:59:29 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r3 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r3, &(0x7f0000000180), 0x14) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r4, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r5, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="72c3cbfcd7e7ca2fa4d3965c367d7fef360e3e0891f1a231423cc988fa05c42c516c3c4d761d27b422f6c9187e34172b6ff2cc4adefac146e030751827f938118621092b7dccfb794cf86fb25bb3a5c3ebdef881578906e63f14c1ecb13300ead8f6597655278e2027755cc42d15a0a6b189a235a58ebcbb8b01550f39aead0e788b"], 0x10, 0x24000880}], 0x2, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r6, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r7, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000680)={0x0, 0x0, r2, 0x10001}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="851200000800000018000000008000eaffffffff0500000018470000fcffffff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000062e7b0100000000000000070000000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x74, &(0x7f0000000300)=""/116, 0x41000, 0x60, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000000380)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x0, 0x7ff, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000400)=[r4, r4], &(0x7f0000000440)=[{0x3, 0x1, 0x4, 0x4}, {0x1, 0x3, 0xe, 0x2}, {0x2, 0x2, 0x3, 0xb}, {0x3, 0x3, 0x3, 0x4}, {0x0, 0x3, 0xb, 0x8}], 0x10, 0xa9}, 0x90) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000600)={0x101, 0x0, 0x1}) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000700), 0x4) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000640)={0x5, r8}) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000006c0)={0x18, 0x0, {0x1, @broadcast, 'veth0_to_hsr\x00'}}) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, 0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r9, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053", 0x3e}, 0x60) 07:59:29 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) r0 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r0, &(0x7f0000000240), &(0x7f0000000280)=0x14) 07:59:29 executing program 3: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 07:59:29 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007000000000050000000b165e42bc8ae50000000080000001000000000000007000000000000000000000001000000000a0063010a00000001000004d700000000000000030000004b0000000c0000000000000e0100000000000000010000000000000b030000000061"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:29 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240), 0x4) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) 07:59:29 executing program 2: bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 07:59:29 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r3 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r3, &(0x7f0000000180), 0x14) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r4, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r5, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="72c3cbfcd7e7ca2fa4d3965c367d7fef360e3e0891f1a231423cc988fa05c42c516c3c4d761d27b422f6c9187e34172b6ff2cc4adefac146e030751827f938118621092b7dccfb794cf86fb25bb3a5c3ebdef881578906e63f14c1ecb13300ead8f6597655278e2027755cc42d15a0a6b189a235a58ebcbb8b01550f39aead0e788b"], 0x10, 0x24000880}], 0x2, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r6, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r7, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000680)={0x0, 0x0, r2, 0x10001}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="851200000800000018000000008000eaffffffff0500000018470000fcffffff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000062e7b0100000000000000070000000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x74, &(0x7f0000000300)=""/116, 0x41000, 0x60, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000000380)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x0, 0x7ff, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000400)=[r4, r4], &(0x7f0000000440)=[{0x3, 0x1, 0x4, 0x4}, {0x1, 0x3, 0xe, 0x2}, {0x2, 0x2, 0x3, 0xb}, {0x3, 0x3, 0x3, 0x4}, {0x0, 0x3, 0xb, 0x8}], 0x10, 0xa9}, 0x90) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000600)={0x101, 0x0, 0x1}) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000700), 0x4) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000640)={0x5, r8}) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000006c0)={0x18, 0x0, {0x1, @broadcast, 'veth0_to_hsr\x00'}}) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, 0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r9, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053", 0x3e}, 0x60) 07:59:29 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:29 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007000000000050000000b165e42bc8ae50000000080000001000000000000007000000000000000000000001000000000a0063010a00000001000004d700000000000000030000004b0000000c0000000000000e0100000000000000010000000000000b030000000061"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:29 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) socket$packet(0x11, 0x3, 0x300) 07:59:29 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240), 0x4) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) 07:59:29 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:29 executing program 2: bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 07:59:29 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007000000000050000000b165e42bc8ae50000000080000001000000000000007000000000000000000000001000000000a0063010a00000001000004d700000000000000030000004b0000000c0000000000000e0100000000000000010000000000000b030000000061"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:29 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r3 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r3, &(0x7f0000000180), 0x14) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r4, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r5, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="72c3cbfcd7e7ca2fa4d3965c367d7fef360e3e0891f1a231423cc988fa05c42c516c3c4d761d27b422f6c9187e34172b6ff2cc4adefac146e030751827f938118621092b7dccfb794cf86fb25bb3a5c3ebdef881578906e63f14c1ecb13300ead8f6597655278e2027755cc42d15a0a6b189a235a58ebcbb8b01550f39aead0e788b"], 0x10, 0x24000880}], 0x2, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r6, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r7, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000680)={0x0, 0x0, r2, 0x10001}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="851200000800000018000000008000eaffffffff0500000018470000fcffffff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000062e7b0100000000000000070000000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x74, &(0x7f0000000300)=""/116, 0x41000, 0x60, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000000380)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x0, 0x7ff, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000400)=[r4, r4], &(0x7f0000000440)=[{0x3, 0x1, 0x4, 0x4}, {0x1, 0x3, 0xe, 0x2}, {0x2, 0x2, 0x3, 0xb}, {0x3, 0x3, 0x3, 0x4}, {0x0, 0x3, 0xb, 0x8}], 0x10, 0xa9}, 0x90) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000600)={0x101, 0x0, 0x1}) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000700), 0x4) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000640)={0x5, r8}) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000006c0)={0x18, 0x0, {0x1, @broadcast, 'veth0_to_hsr\x00'}}) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, 0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r9, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053", 0x3e}, 0x60) 07:59:29 executing program 5: socket$packet(0x11, 0x3, 0x300) 07:59:29 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240), 0x4) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) 07:59:29 executing program 4: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 07:59:29 executing program 2: bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 07:59:29 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:29 executing program 5: socket$packet(0x11, 0x0, 0x300) 07:59:29 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240), 0x4) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) 07:59:29 executing program 4: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 07:59:30 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r3 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r3, &(0x7f0000000180), 0x14) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r4, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r5, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="72c3cbfcd7e7ca2fa4d3965c367d7fef360e3e0891f1a231423cc988fa05c42c516c3c4d761d27b422f6c9187e34172b6ff2cc4adefac146e030751827f938118621092b7dccfb794cf86fb25bb3a5c3ebdef881578906e63f14c1ecb13300ead8f6597655278e2027755cc42d15a0a6b189a235a58ebcbb8b01550f39aead0e788b"], 0x10, 0x24000880}], 0x2, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r6, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r7, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000680)={0x0, 0x0, r2, 0x10001}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="851200000800000018000000008000eaffffffff0500000018470000fcffffff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000062e7b0100000000000000070000000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x74, &(0x7f0000000300)=""/116, 0x41000, 0x60, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000000380)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x0, 0x7ff, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000400)=[r4, r4], &(0x7f0000000440)=[{0x3, 0x1, 0x4, 0x4}, {0x1, 0x3, 0xe, 0x2}, {0x2, 0x2, 0x3, 0xb}, {0x3, 0x3, 0x3, 0x4}, {0x0, 0x3, 0xb, 0x8}], 0x10, 0xa9}, 0x90) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000600)={0x101, 0x0, 0x1}) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000700), 0x4) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000640)={0x5, r8}) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000006c0)={0x18, 0x0, {0x1, @broadcast, 'veth0_to_hsr\x00'}}) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, 0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 07:59:30 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map, 0x0, 0x1, 0x100, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) 07:59:30 executing program 5: socket$packet(0x11, 0x0, 0x300) 07:59:30 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:30 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240), 0x4) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) 07:59:30 executing program 4: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 07:59:30 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r3 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r3, &(0x7f0000000180), 0x14) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r4, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r5, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="72c3cbfcd7e7ca2fa4d3965c367d7fef360e3e0891f1a231423cc988fa05c42c516c3c4d761d27b422f6c9187e34172b6ff2cc4adefac146e030751827f938118621092b7dccfb794cf86fb25bb3a5c3ebdef881578906e63f14c1ecb13300ead8f6597655278e2027755cc42d15a0a6b189a235a58ebcbb8b01550f39aead0e788b"], 0x10, 0x24000880}], 0x2, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r6, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r7, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000680)={0x0, 0x0, r2, 0x10001}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="851200000800000018000000008000eaffffffff0500000018470000fcffffff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000062e7b0100000000000000070000000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x74, &(0x7f0000000300)=""/116, 0x41000, 0x60, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000000380)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x0, 0x7ff, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000400)=[r4, r4], &(0x7f0000000440)=[{0x3, 0x1, 0x4, 0x4}, {0x1, 0x3, 0xe, 0x2}, {0x2, 0x2, 0x3, 0xb}, {0x3, 0x3, 0x3, 0x4}, {0x0, 0x3, 0xb, 0x8}], 0x10, 0xa9}, 0x90) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000600)={0x101, 0x0, 0x1}) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000700), 0x4) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000640)={0x5, r8}) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000006c0)={0x18, 0x0, {0x1, @broadcast, 'veth0_to_hsr\x00'}}) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, 0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) 07:59:30 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map, 0x0, 0x1, 0x100, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) 07:59:30 executing program 5: socket$packet(0x11, 0x0, 0x300) 07:59:30 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:30 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:30 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map, 0x0, 0x1, 0x100, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) 07:59:30 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240), 0x4) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) 07:59:30 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r3 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r3, &(0x7f0000000180), 0x14) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r4, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r5, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="72c3cbfcd7e7ca2fa4d3965c367d7fef360e3e0891f1a231423cc988fa05c42c516c3c4d761d27b422f6c9187e34172b6ff2cc4adefac146e030751827f938118621092b7dccfb794cf86fb25bb3a5c3ebdef881578906e63f14c1ecb13300ead8f6597655278e2027755cc42d15a0a6b189a235a58ebcbb8b01550f39aead0e788b"], 0x10, 0x24000880}], 0x2, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r6, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r7, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000680)={0x0, 0x0, r2, 0x10001}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="851200000800000018000000008000eaffffffff0500000018470000fcffffff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000062e7b0100000000000000070000000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x74, &(0x7f0000000300)=""/116, 0x41000, 0x60, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000000380)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x0, 0x7ff, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000400)=[r4, r4], &(0x7f0000000440)=[{0x3, 0x1, 0x4, 0x4}, {0x1, 0x3, 0xe, 0x2}, {0x2, 0x2, 0x3, 0xb}, {0x3, 0x3, 0x3, 0x4}, {0x0, 0x3, 0xb, 0x8}], 0x10, 0xa9}, 0x90) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000600)={0x101, 0x0, 0x1}) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000700), 0x4) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000640)={0x5, r8}) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000006c0)={0x18, 0x0, {0x1, @broadcast, 'veth0_to_hsr\x00'}}) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, 0x0) 07:59:30 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:30 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:30 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:30 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map, 0x2f, 0x0, 0x100, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) 07:59:30 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240), 0x4) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)) 07:59:30 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:30 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:30 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r3 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r3, &(0x7f0000000180), 0x14) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r4, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r5, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="72c3cbfcd7e7ca2fa4d3965c367d7fef360e3e0891f1a231423cc988fa05c42c516c3c4d761d27b422f6c9187e34172b6ff2cc4adefac146e030751827f938118621092b7dccfb794cf86fb25bb3a5c3ebdef881578906e63f14c1ecb13300ead8f6597655278e2027755cc42d15a0a6b189a235a58ebcbb8b01550f39aead0e788b"], 0x10, 0x24000880}], 0x2, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r6, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r7, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000680)={0x0, 0x0, r2, 0x10001}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="851200000800000018000000008000eaffffffff0500000018470000fcffffff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000062e7b0100000000000000070000000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x74, &(0x7f0000000300)=""/116, 0x41000, 0x60, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000000380)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x0, 0x7ff, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000400)=[r4, r4], &(0x7f0000000440)=[{0x3, 0x1, 0x4, 0x4}, {0x1, 0x3, 0xe, 0x2}, {0x2, 0x2, 0x3, 0xb}, {0x3, 0x3, 0x3, 0x4}, {0x0, 0x3, 0xb, 0x8}], 0x10, 0xa9}, 0x90) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000600)={0x101, 0x0, 0x1}) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000700), 0x4) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000640)={0x5, r8}) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000006c0)={0x18, 0x0, {0x1, @broadcast, 'veth0_to_hsr\x00'}}) 07:59:30 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map, 0x2f, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) 07:59:30 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:30 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240), 0x4) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) 07:59:30 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r3 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r3, &(0x7f0000000180), 0x14) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r4, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r5, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="72c3cbfcd7e7ca2fa4d3965c367d7fef360e3e0891f1a231423cc988fa05c42c516c3c4d761d27b422f6c9187e34172b6ff2cc4adefac146e030751827f938118621092b7dccfb794cf86fb25bb3a5c3ebdef881578906e63f14c1ecb13300ead8f6597655278e2027755cc42d15a0a6b189a235a58ebcbb8b01550f39aead0e788b"], 0x10, 0x24000880}], 0x2, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r6, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r7, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000680)={0x0, 0x0, r2, 0x10001}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="851200000800000018000000008000eaffffffff0500000018470000fcffffff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000062e7b0100000000000000070000000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x74, &(0x7f0000000300)=""/116, 0x41000, 0x60, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000000380)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x0, 0x7ff, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000400)=[r4, r4], &(0x7f0000000440)=[{0x3, 0x1, 0x4, 0x4}, {0x1, 0x3, 0xe, 0x2}, {0x2, 0x2, 0x3, 0xb}, {0x3, 0x3, 0x3, 0x4}, {0x0, 0x3, 0xb, 0x8}], 0x10, 0xa9}, 0x90) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000600)={0x101, 0x0, 0x1}) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000700), 0x4) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000640)={0x5, r8}) 07:59:30 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:30 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:30 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240), 0x4) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) 07:59:30 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) 07:59:30 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:31 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r3 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r3, &(0x7f0000000180), 0x14) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r4, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r5, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="72c3cbfcd7e7ca2fa4d3965c367d7fef360e3e0891f1a231423cc988fa05c42c516c3c4d761d27b422f6c9187e34172b6ff2cc4adefac146e030751827f938118621092b7dccfb794cf86fb25bb3a5c3ebdef881578906e63f14c1ecb13300ead8f6597655278e2027755cc42d15a0a6b189a235a58ebcbb8b01550f39aead0e788b"], 0x10, 0x24000880}], 0x2, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r6, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r7, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000680)={0x0, 0x0, r2, 0x10001}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="851200000800000018000000008000eaffffffff0500000018470000fcffffff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000062e7b0100000000000000070000000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x74, &(0x7f0000000300)=""/116, 0x41000, 0x60, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000000380)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x0, 0x7ff, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000400)=[r4, r4], &(0x7f0000000440)=[{0x3, 0x1, 0x4, 0x4}, {0x1, 0x3, 0xe, 0x2}, {0x2, 0x2, 0x3, 0xb}, {0x3, 0x3, 0x3, 0x4}, {0x0, 0x3, 0xb, 0x8}], 0x10, 0xa9}, 0x90) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000600)={0x101, 0x0, 0x1}) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000700), 0x4) 07:59:31 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:31 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 07:59:31 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:31 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240), 0x4) 07:59:31 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) 07:59:31 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007000000000050000000b165e42bc8ae50000000080000001000000000000007000000000000000000000001000000000a00"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:31 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r3 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r3, &(0x7f0000000180), 0x14) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r4, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r5, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="72c3cbfcd7e7ca2fa4d3965c367d7fef360e3e0891f1a231423cc988fa05c42c516c3c4d761d27b422f6c9187e34172b6ff2cc4adefac146e030751827f938118621092b7dccfb794cf86fb25bb3a5c3ebdef881578906e63f14c1ecb13300ead8f6597655278e2027755cc42d15a0a6b189a235a58ebcbb8b01550f39aead0e788b"], 0x10, 0x24000880}], 0x2, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r6, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r7, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000680)={0x0, 0x0, r2, 0x10001}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="851200000800000018000000008000eaffffffff0500000018470000fcffffff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000062e7b0100000000000000070000000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x74, &(0x7f0000000300)=""/116, 0x41000, 0x60, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000000380)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x0, 0x7ff, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000400)=[r4, r4], &(0x7f0000000440)=[{0x3, 0x1, 0x4, 0x4}, {0x1, 0x3, 0xe, 0x2}, {0x2, 0x2, 0x3, 0xb}, {0x3, 0x3, 0x3, 0x4}, {0x0, 0x3, 0xb, 0x8}], 0x10, 0xa9}, 0x90) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000700), 0x4) 07:59:31 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 07:59:31 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:31 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) 07:59:31 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240), 0x4) 07:59:31 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:31 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r3 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r3, &(0x7f0000000180), 0x14) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r4, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r5, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="72c3cbfcd7e7ca2fa4d3965c367d7fef360e3e0891f1a231423cc988fa05c42c516c3c4d761d27b422f6c9187e34172b6ff2cc4adefac146e030751827f938118621092b7dccfb794cf86fb25bb3a5c3ebdef881578906e63f14c1ecb13300ead8f6597655278e2027755cc42d15a0a6b189a235a58ebcbb8b01550f39aead0e788b"], 0x10, 0x24000880}], 0x2, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r6, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r7, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000680)={0x0, 0x0, r2, 0x10001}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="851200000800000018000000008000eaffffffff0500000018470000fcffffff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000062e7b0100000000000000070000000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x74, &(0x7f0000000300)=""/116, 0x41000, 0x60, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000000380)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x0, 0x7ff, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000400)=[r4, r4], &(0x7f0000000440)=[{0x3, 0x1, 0x4, 0x4}, {0x1, 0x3, 0xe, 0x2}, {0x2, 0x2, 0x3, 0xb}, {0x3, 0x3, 0x3, 0x4}, {0x0, 0x3, 0xb, 0x8}], 0x10, 0xa9}, 0x90) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000700), 0x4) 07:59:31 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 07:59:31 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:31 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 07:59:31 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240), 0x4) 07:59:31 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r3 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r3, &(0x7f0000000180), 0x14) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r4, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r5, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="72c3cbfcd7e7ca2fa4d3965c367d7fef360e3e0891f1a231423cc988fa05c42c516c3c4d761d27b422f6c9187e34172b6ff2cc4adefac146e030751827f938118621092b7dccfb794cf86fb25bb3a5c3ebdef881578906e63f14c1ecb13300ead8f6597655278e2027755cc42d15a0a6b189a235a58ebcbb8b01550f39aead0e788b"], 0x10, 0x24000880}], 0x2, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r6, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r7, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000680)={0x0, 0x0, r2, 0x10001}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="851200000800000018000000008000eaffffffff0500000018470000fcffffff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000062e7b0100000000000000070000000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x74, &(0x7f0000000300)=""/116, 0x41000, 0x60, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000000380)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x0, 0x7ff, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000400)=[r4, r4], &(0x7f0000000440)=[{0x3, 0x1, 0x4, 0x4}, {0x1, 0x3, 0xe, 0x2}, {0x2, 0x2, 0x3, 0xb}, {0x3, 0x3, 0x3, 0x4}, {0x0, 0x3, 0xb, 0x8}], 0x10, 0xa9}, 0x90) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000700), 0x4) 07:59:31 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:31 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r1, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x14202, 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x6) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000280)={@private, @local, 0x0}, &(0x7f00000002c0)=0xc) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x108, 0x12, 0x100, 0x70bd2a, 0x25dfdbfe, {0x29, 0x0, 0x3f, 0x9, {0x4e23, 0x4e24, [0xfff, 0x5, 0x2fc00, 0x4], [0x1, 0xffff, 0x9, 0x6468], r3, [0xfffff9c0, 0x401]}, 0x4, 0x7ff}, [@INET_DIAG_REQ_BYTECODE={0x50, 0x1, "c11f98529ecc835c9184947150d552a6c544f67a029086c45818b760378d801c75d72c5b96acfbdfcd092055978e2cf2af4e9c594d6a2d7ee5af6c1c3c2bd5a742cea4a7a0c5fafc2b30bb45"}, @INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "8bc60b925039e3a6e0ffe6bd8adae9ea7093ebbcd14443381f525d1762596795f0553fc8b4a9d47a67bb0b1aa7df5dd08720a3044bcac75938a4ebaaccf705bf8cd86f56c5909eb51985af013e684c9d1848ce82e456a1a7fcc60a0486467795b79551953906c0"}]}, 0x108}, 0x1, 0x0, 0x0, 0x14004004}, 0x4004800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x22, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053", 0x6}, 0x60) accept4$nfc_llcp(r4, 0x0, &(0x7f0000000000), 0x80000) 07:59:31 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:31 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:31 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240), 0x4) 07:59:31 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:31 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r3 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r3, &(0x7f0000000180), 0x14) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r4, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r5, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="72c3cbfcd7e7ca2fa4d3965c367d7fef360e3e0891f1a231423cc988fa05c42c516c3c4d761d27b422f6c9187e34172b6ff2cc4adefac146e030751827f938118621092b7dccfb794cf86fb25bb3a5c3ebdef881578906e63f14c1ecb13300ead8f6597655278e2027755cc42d15a0a6b189a235a58ebcbb8b01550f39aead0e788b"], 0x10, 0x24000880}], 0x2, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r6, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r7, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000680)={0x0, 0x0, r2, 0x10001}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="851200000800000018000000008000eaffffffff0500000018470000fcffffff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000062e7b0100000000000000070000000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x74, &(0x7f0000000300)=""/116, 0x41000, 0x60, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000000380)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x0, 0x7ff, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000400)=[r4, r4], &(0x7f0000000440)=[{0x3, 0x1, 0x4, 0x4}, {0x1, 0x3, 0xe, 0x2}, {0x2, 0x2, 0x3, 0xb}, {0x3, 0x3, 0x3, 0x4}, {0x0, 0x3, 0xb, 0x8}], 0x10, 0xa9}, 0x90) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000700), 0x4) 07:59:31 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:31 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r1, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x14202, 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x6) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000280)={@private, @local, 0x0}, &(0x7f00000002c0)=0xc) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x108, 0x12, 0x100, 0x70bd2a, 0x25dfdbfe, {0x29, 0x0, 0x3f, 0x9, {0x4e23, 0x4e24, [0xfff, 0x5, 0x2fc00, 0x4], [0x1, 0xffff, 0x9, 0x6468], r3, [0xfffff9c0, 0x401]}, 0x4, 0x7ff}, [@INET_DIAG_REQ_BYTECODE={0x50, 0x1, "c11f98529ecc835c9184947150d552a6c544f67a029086c45818b760378d801c75d72c5b96acfbdfcd092055978e2cf2af4e9c594d6a2d7ee5af6c1c3c2bd5a742cea4a7a0c5fafc2b30bb45"}, @INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "8bc60b925039e3a6e0ffe6bd8adae9ea7093ebbcd14443381f525d1762596795f0553fc8b4a9d47a67bb0b1aa7df5dd08720a3044bcac75938a4ebaaccf705bf8cd86f56c5909eb51985af013e684c9d1848ce82e456a1a7fcc60a0486467795b79551953906c0"}]}, 0x108}, 0x1, 0x0, 0x0, 0x14004004}, 0x4004800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x22, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053", 0x6}, 0x60) accept4$nfc_llcp(r4, 0x0, &(0x7f0000000000), 0x80000) 07:59:31 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:31 executing program 0: setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240), 0x4) 07:59:31 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007000000000050000000b165e42bc8ae500000000800"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:32 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r3 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r3, &(0x7f0000000180), 0x14) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r4, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r5, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="72c3cbfcd7e7ca2fa4d3965c367d7fef360e3e0891f1a231423cc988fa05c42c516c3c4d761d27b422f6c9187e34172b6ff2cc4adefac146e030751827f938118621092b7dccfb794cf86fb25bb3a5c3ebdef881578906e63f14c1ecb13300ead8f6597655278e2027755cc42d15a0a6b189a235a58ebcbb8b01550f39aead0e788b"], 0x10, 0x24000880}], 0x2, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r6, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r7, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000680)={0x0, 0x0, r2, 0x10001}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="851200000800000018000000008000eaffffffff0500000018470000fcffffff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000062e7b0100000000000000070000000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x74, &(0x7f0000000300)=""/116, 0x41000, 0x60, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000000380)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x0, 0x7ff, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000400)=[r4, r4], &(0x7f0000000440)=[{0x3, 0x1, 0x4, 0x4}, {0x1, 0x3, 0xe, 0x2}, {0x2, 0x2, 0x3, 0xb}, {0x3, 0x3, 0x3, 0x4}, {0x0, 0x3, 0xb, 0x8}], 0x10, 0xa9}, 0x90) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000700), 0x4) 07:59:32 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:32 executing program 0: setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) 07:59:32 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r1, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x14202, 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x6) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000280)={@private, @local, 0x0}, &(0x7f00000002c0)=0xc) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x108, 0x12, 0x100, 0x70bd2a, 0x25dfdbfe, {0x29, 0x0, 0x3f, 0x9, {0x4e23, 0x4e24, [0xfff, 0x5, 0x2fc00, 0x4], [0x1, 0xffff, 0x9, 0x6468], r3, [0xfffff9c0, 0x401]}, 0x4, 0x7ff}, [@INET_DIAG_REQ_BYTECODE={0x50, 0x1, "c11f98529ecc835c9184947150d552a6c544f67a029086c45818b760378d801c75d72c5b96acfbdfcd092055978e2cf2af4e9c594d6a2d7ee5af6c1c3c2bd5a742cea4a7a0c5fafc2b30bb45"}, @INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "8bc60b925039e3a6e0ffe6bd8adae9ea7093ebbcd14443381f525d1762596795f0553fc8b4a9d47a67bb0b1aa7df5dd08720a3044bcac75938a4ebaaccf705bf8cd86f56c5909eb51985af013e684c9d1848ce82e456a1a7fcc60a0486467795b79551953906c0"}]}, 0x108}, 0x1, 0x0, 0x0, 0x14004004}, 0x4004800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x22, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053", 0x6}, 0x60) accept4$nfc_llcp(r4, 0x0, &(0x7f0000000000), 0x80000) 07:59:32 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007000000000050000000b165e42bc8ae50000000080000001000000000000007000000000000000000000001000000000a00"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:32 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:32 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], 0x0, 0x70, 0x0, 0x1, 0x4d}, 0x20) 07:59:32 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r1, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x14202, 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x6) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000280)={@private, @local, 0x0}, &(0x7f00000002c0)=0xc) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x108, 0x12, 0x100, 0x70bd2a, 0x25dfdbfe, {0x29, 0x0, 0x3f, 0x9, {0x4e23, 0x4e24, [0xfff, 0x5, 0x2fc00, 0x4], [0x1, 0xffff, 0x9, 0x6468], r3, [0xfffff9c0, 0x401]}, 0x4, 0x7ff}, [@INET_DIAG_REQ_BYTECODE={0x50, 0x1, "c11f98529ecc835c9184947150d552a6c544f67a029086c45818b760378d801c75d72c5b96acfbdfcd092055978e2cf2af4e9c594d6a2d7ee5af6c1c3c2bd5a742cea4a7a0c5fafc2b30bb45"}, @INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "8bc60b925039e3a6e0ffe6bd8adae9ea7093ebbcd14443381f525d1762596795f0553fc8b4a9d47a67bb0b1aa7df5dd08720a3044bcac75938a4ebaaccf705bf8cd86f56c5909eb51985af013e684c9d1848ce82e456a1a7fcc60a0486467795b79551953906c0"}]}, 0x108}, 0x1, 0x0, 0x0, 0x14004004}, 0x4004800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x22, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053", 0x6}, 0x60) accept4$nfc_llcp(r4, 0x0, &(0x7f0000000000), 0x80000) 07:59:32 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:32 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r3 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r3, &(0x7f0000000180), 0x14) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r4, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r5, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="72c3cbfcd7e7ca2fa4d3965c367d7fef360e3e0891f1a231423cc988fa05c42c516c3c4d761d27b422f6c9187e34172b6ff2cc4adefac146e030751827f938118621092b7dccfb794cf86fb25bb3a5c3ebdef881578906e63f14c1ecb13300ead8f6597655278e2027755cc42d15a0a6b189a235a58ebcbb8b01550f39aead0e788b"], 0x10, 0x24000880}], 0x2, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r6, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r7, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000680)={0x0, 0x0, r2, 0x10001}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="851200000800000018000000008000eaffffffff0500000018470000fcffffff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000062e7b0100000000000000070000000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x74, &(0x7f0000000300)=""/116, 0x41000, 0x60, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000000380)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x0, 0x7ff, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000400)=[r4, r4], &(0x7f0000000440)=[{0x3, 0x1, 0x4, 0x4}, {0x1, 0x3, 0xe, 0x2}, {0x2, 0x2, 0x3, 0xb}, {0x3, 0x3, 0x3, 0x4}, {0x0, 0x3, 0xb, 0x8}], 0x10, 0xa9}, 0x90) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000700), 0x4) 07:59:32 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r1, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x14202, 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x6) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000280)={@private, @local, 0x0}, &(0x7f00000002c0)=0xc) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x108, 0x12, 0x100, 0x70bd2a, 0x25dfdbfe, {0x29, 0x0, 0x3f, 0x9, {0x4e23, 0x4e24, [0xfff, 0x5, 0x2fc00, 0x4], [0x1, 0xffff, 0x9, 0x6468], r3, [0xfffff9c0, 0x401]}, 0x4, 0x7ff}, [@INET_DIAG_REQ_BYTECODE={0x50, 0x1, "c11f98529ecc835c9184947150d552a6c544f67a029086c45818b760378d801c75d72c5b96acfbdfcd092055978e2cf2af4e9c594d6a2d7ee5af6c1c3c2bd5a742cea4a7a0c5fafc2b30bb45"}, @INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "8bc60b925039e3a6e0ffe6bd8adae9ea7093ebbcd14443381f525d1762596795f0553fc8b4a9d47a67bb0b1aa7df5dd08720a3044bcac75938a4ebaaccf705bf8cd86f56c5909eb51985af013e684c9d1848ce82e456a1a7fcc60a0486467795b79551953906c0"}]}, 0x108}, 0x1, 0x0, 0x0, 0x14004004}, 0x4004800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x22, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053", 0x6}, 0x60) 07:59:32 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:32 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], 0x0, 0x70, 0x0, 0x1, 0x4d}, 0x20) 07:59:32 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:32 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x28080, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001600)=0x0) socket$kcm(0x29, 0x2, 0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r1, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) 07:59:32 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r1, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x14202, 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x6) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000280)={@private, @local, 0x0}, &(0x7f00000002c0)=0xc) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x108, 0x12, 0x100, 0x70bd2a, 0x25dfdbfe, {0x29, 0x0, 0x3f, 0x9, {0x4e23, 0x4e24, [0xfff, 0x5, 0x2fc00, 0x4], [0x1, 0xffff, 0x9, 0x6468], r3, [0xfffff9c0, 0x401]}, 0x4, 0x7ff}, [@INET_DIAG_REQ_BYTECODE={0x50, 0x1, "c11f98529ecc835c9184947150d552a6c544f67a029086c45818b760378d801c75d72c5b96acfbdfcd092055978e2cf2af4e9c594d6a2d7ee5af6c1c3c2bd5a742cea4a7a0c5fafc2b30bb45"}, @INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "8bc60b925039e3a6e0ffe6bd8adae9ea7093ebbcd14443381f525d1762596795f0553fc8b4a9d47a67bb0b1aa7df5dd08720a3044bcac75938a4ebaaccf705bf8cd86f56c5909eb51985af013e684c9d1848ce82e456a1a7fcc60a0486467795b79551953906c0"}]}, 0x108}, 0x1, 0x0, 0x0, 0x14004004}, 0x4004800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 07:59:32 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r3 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r3, &(0x7f0000000180), 0x14) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r4, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r5, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="72c3cbfcd7e7ca2fa4d3965c367d7fef360e3e0891f1a231423cc988fa05c42c516c3c4d761d27b422f6c9187e34172b6ff2cc4adefac146e030751827f938118621092b7dccfb794cf86fb25bb3a5c3ebdef881578906e63f14c1ecb13300ead8f6597655278e2027755cc42d15a0a6b189a235a58ebcbb8b01550f39aead0e788b"], 0x10, 0x24000880}], 0x2, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r6, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r7, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000680)={0x0, 0x0, r2, 0x10001}) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000700), 0x4) 07:59:32 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:32 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], 0x0, 0x70, 0x0, 0x1, 0x4d}, 0x20) 07:59:32 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:32 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000700000000005000"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:32 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r2 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r2, &(0x7f0000000180), 0x14) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r3, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r4, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="72c3cbfcd7e7ca2fa4d3965c367d7fef360e3e0891f1a231423cc988fa05c42c516c3c4d761d27b422f6c9187e34172b6ff2cc4adefac146e030751827f938118621092b7dccfb794cf86fb25bb3a5c3ebdef881578906e63f14c1ecb13300ead8f6597655278e2027755cc42d15a0a6b189a235a58ebcbb8b01550f39aead0e788b"], 0x10, 0x24000880}], 0x2, 0x0) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r5, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r6, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) getsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000700), 0x4) 07:59:32 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r1, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x14202, 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x6) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000280)={@private, @local, 0x0}, &(0x7f00000002c0)=0xc) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x108, 0x12, 0x100, 0x70bd2a, 0x25dfdbfe, {0x29, 0x0, 0x3f, 0x9, {0x4e23, 0x4e24, [0xfff, 0x5, 0x2fc00, 0x4], [0x1, 0xffff, 0x9, 0x6468], r3, [0xfffff9c0, 0x401]}, 0x4, 0x7ff}, [@INET_DIAG_REQ_BYTECODE={0x50, 0x1, "c11f98529ecc835c9184947150d552a6c544f67a029086c45818b760378d801c75d72c5b96acfbdfcd092055978e2cf2af4e9c594d6a2d7ee5af6c1c3c2bd5a742cea4a7a0c5fafc2b30bb45"}, @INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "8bc60b925039e3a6e0ffe6bd8adae9ea7093ebbcd14443381f525d1762596795f0553fc8b4a9d47a67bb0b1aa7df5dd08720a3044bcac75938a4ebaaccf705bf8cd86f56c5909eb51985af013e684c9d1848ce82e456a1a7fcc60a0486467795b79551953906c0"}]}, 0x108}, 0x1, 0x0, 0x0, 0x14004004}, 0x4004800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) 07:59:32 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) 07:59:32 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x0, 0x4d}, 0x20) 07:59:32 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007000000000050000000b165e42bc8ae500000000800"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:32 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:32 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r2 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r2, &(0x7f0000000180), 0x14) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r3, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r4, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="72c3cbfcd7e7ca2fa4d3965c367d7fef360e3e0891f1a231423cc988fa05c42c516c3c4d761d27b422f6c9187e34172b6ff2cc4adefac146e030751827f938118621092b7dccfb794cf86fb25bb3a5c3ebdef881578906e63f14c1ecb13300ead8f6597655278e2027755cc42d15a0a6b189a235a58ebcbb8b01550f39aead0e788b"], 0x10, 0x24000880}], 0x2, 0x0) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r5, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) getsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000700), 0x4) 07:59:32 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r1, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x14202, 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x6) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000280)={@private, @local, 0x0}, &(0x7f00000002c0)=0xc) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x108, 0x12, 0x100, 0x70bd2a, 0x25dfdbfe, {0x29, 0x0, 0x3f, 0x9, {0x4e23, 0x4e24, [0xfff, 0x5, 0x2fc00, 0x4], [0x1, 0xffff, 0x9, 0x6468], r3, [0xfffff9c0, 0x401]}, 0x4, 0x7ff}, [@INET_DIAG_REQ_BYTECODE={0x50, 0x1, "c11f98529ecc835c9184947150d552a6c544f67a029086c45818b760378d801c75d72c5b96acfbdfcd092055978e2cf2af4e9c594d6a2d7ee5af6c1c3c2bd5a742cea4a7a0c5fafc2b30bb45"}, @INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "8bc60b925039e3a6e0ffe6bd8adae9ea7093ebbcd14443381f525d1762596795f0553fc8b4a9d47a67bb0b1aa7df5dd08720a3044bcac75938a4ebaaccf705bf8cd86f56c5909eb51985af013e684c9d1848ce82e456a1a7fcc60a0486467795b79551953906c0"}]}, 0x108}, 0x1, 0x0, 0x0, 0x14004004}, 0x4004800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) 07:59:32 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r1, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r2, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:32 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x0, 0x4d}, 0x20) 07:59:32 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:33 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r2 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r2, &(0x7f0000000180), 0x14) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r3, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r4, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="72c3cbfcd7e7ca2fa4d3965c367d7fef360e3e0891f1a231423cc988fa05c42c516c3c4d761d27b422f6c9187e34172b6ff2cc4adefac146e030751827f938118621092b7dccfb794cf86fb25bb3a5c3ebdef881578906e63f14c1ecb13300ead8f6597655278e2027755cc42d15a0a6b189a235a58ebcbb8b01550f39aead0e788b"], 0x10, 0x24000880}], 0x2, 0x0) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000700), 0x4) 07:59:33 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:33 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x0, 0x4d}, 0x20) 07:59:33 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:33 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) 07:59:33 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r1, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x14202, 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x6) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000280)={@private, @local, 0x0}, &(0x7f00000002c0)=0xc) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x108, 0x12, 0x100, 0x70bd2a, 0x25dfdbfe, {0x29, 0x0, 0x3f, 0x9, {0x4e23, 0x4e24, [0xfff, 0x5, 0x2fc00, 0x4], [0x1, 0xffff, 0x9, 0x6468], r3, [0xfffff9c0, 0x401]}, 0x4, 0x7ff}, [@INET_DIAG_REQ_BYTECODE={0x50, 0x1, "c11f98529ecc835c9184947150d552a6c544f67a029086c45818b760378d801c75d72c5b96acfbdfcd092055978e2cf2af4e9c594d6a2d7ee5af6c1c3c2bd5a742cea4a7a0c5fafc2b30bb45"}, @INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "8bc60b925039e3a6e0ffe6bd8adae9ea7093ebbcd14443381f525d1762596795f0553fc8b4a9d47a67bb0b1aa7df5dd08720a3044bcac75938a4ebaaccf705bf8cd86f56c5909eb51985af013e684c9d1848ce82e456a1a7fcc60a0486467795b79551953906c0"}]}, 0x108}, 0x1, 0x0, 0x0, 0x14004004}, 0x4004800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 07:59:33 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r2 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r2, &(0x7f0000000180), 0x14) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r3, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r4, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="72c3cbfcd7e7ca2fa4d3965c367d7fef360e3e0891f1a231423cc988fa05c42c516c3c4d761d27b422f6c9187e34172b6ff2cc4adefac146e030751827f938118621092b7dccfb794cf86fb25bb3a5c3ebdef881578906e63f14c1ecb13300ead8f6597655278e2027755cc42d15a0a6b189a235a58ebcbb8b01550f39aead0e788b"], 0x10, 0x24000880}], 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000700), 0x4) 07:59:33 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1}, 0x20) 07:59:33 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:33 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:33 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r1, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x14202, 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x6) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000280)={@private, @local, 0x0}, &(0x7f00000002c0)=0xc) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x108, 0x12, 0x100, 0x70bd2a, 0x25dfdbfe, {0x29, 0x0, 0x3f, 0x9, {0x4e23, 0x4e24, [0xfff, 0x5, 0x2fc00, 0x4], [0x1, 0xffff, 0x9, 0x6468], r3, [0xfffff9c0, 0x401]}, 0x4, 0x7ff}, [@INET_DIAG_REQ_BYTECODE={0x50, 0x1, "c11f98529ecc835c9184947150d552a6c544f67a029086c45818b760378d801c75d72c5b96acfbdfcd092055978e2cf2af4e9c594d6a2d7ee5af6c1c3c2bd5a742cea4a7a0c5fafc2b30bb45"}, @INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "8bc60b925039e3a6e0ffe6bd8adae9ea7093ebbcd14443381f525d1762596795f0553fc8b4a9d47a67bb0b1aa7df5dd08720a3044bcac75938a4ebaaccf705bf8cd86f56c5909eb51985af013e684c9d1848ce82e456a1a7fcc60a0486467795b79551953906c0"}]}, 0x108}, 0x1, 0x0, 0x0, 0x14004004}, 0x4004800) 07:59:33 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) 07:59:33 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x6620c2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x6, 0x1, 0x5}) 07:59:33 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r2 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r2, &(0x7f0000000180), 0x14) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r3, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r4, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="72c3cbfcd7e7ca2fa4d3965c367d7fef360e3e0891f1a231423cc988fa05c42c516c3c4d761d27b422f6c9187e34172b6ff2cc4adefac146e030751827f938118621092b7dccfb794cf86fb25bb3a5c3ebdef881578906e63f14c1ecb13300ead8f6597655278e2027755cc42d15a0a6b189a235a58ebcbb8b01550f39aead0e788b"], 0x10, 0x24000880}], 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000700), 0x4) 07:59:33 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:33 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r1, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x14202, 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x6) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000280)={@private, @local}, &(0x7f00000002c0)=0xc) 07:59:33 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000700000000005000"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:33 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x28080, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000001600)=0x0) socket$kcm(0x29, 0x2, 0x0) sendmmsg$nfc_llcp(r1, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r2, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) bind$nfc_llcp(r0, &(0x7f0000000140)={0x27, r2, 0x0, 0x7, 0x40, 0xf7, "b2796c9b8250dc153ba2fd041b6a3e6ed0e4e61e95b009328ce1412ec06914596a13ab12bd73884a80b0128663c85c832eeb225a5df94aeea93ac1523d865a", 0xd}, 0x60) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r3, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:33 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) 07:59:33 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r2 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r2, &(0x7f0000000180), 0x14) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r3, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r4, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="72c3cbfcd7e7ca2fa4d3965c367d7fef360e3e0891f1a231423cc988fa05c42c516c3c4d761d27b422f6c9187e34172b6ff2cc4adefac146e030751827f938118621092b7dccfb794cf86fb25bb3a5c3ebdef881578906e63f14c1ecb13300ead8f6597655278e2027755cc42d15a0a6b189a235a58ebcbb8b01550f39aead0e788b"], 0x10, 0x24000880}], 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000700), 0x4) 07:59:33 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:33 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r1, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x14202, 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x6) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 07:59:33 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:33 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x28080, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000001600)=0x0) socket$kcm(0x29, 0x2, 0x0) sendmmsg$nfc_llcp(r1, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r2, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) bind$nfc_llcp(r0, &(0x7f0000000140)={0x27, r2, 0x0, 0x7, 0x40, 0xf7, "b2796c9b8250dc153ba2fd041b6a3e6ed0e4e61e95b009328ce1412ec06914596a13ab12bd73884a80b0128663c85c832eeb225a5df94aeea93ac1523d865a", 0xd}, 0x60) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r3, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:33 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) 07:59:33 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:33 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r2 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r2, &(0x7f0000000180), 0x14) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001600)) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000700), 0x4) 07:59:33 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:33 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r1, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x14202, 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x6) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) 07:59:33 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r2 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r2, &(0x7f0000000180), 0x14) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000200)) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000700), 0x4) 07:59:34 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) 07:59:34 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:34 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x28080, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000001600)=0x0) socket$kcm(0x29, 0x2, 0x0) sendmmsg$nfc_llcp(r1, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r2, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) bind$nfc_llcp(r0, &(0x7f0000000140)={0x27, r2, 0x0, 0x7, 0x40, 0xf7, "b2796c9b8250dc153ba2fd041b6a3e6ed0e4e61e95b009328ce1412ec06914596a13ab12bd73884a80b0128663c85c832eeb225a5df94aeea93ac1523d865a", 0xd}, 0x60) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r3, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:34 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:34 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r1, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x14202, 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x6) 07:59:34 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x28080, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000001600)=0x0) socket$kcm(0x29, 0x2, 0x0) sendmmsg$nfc_llcp(r1, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r2, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) bind$nfc_llcp(r0, &(0x7f0000000140)={0x27, r2, 0x0, 0x7, 0x40, 0xf7, "b2796c9b8250dc153ba2fd041b6a3e6ed0e4e61e95b009328ce1412ec06914596a13ab12bd73884a80b0128663c85c832eeb225a5df94aeea93ac1523d865a", 0xd}, 0x60) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 07:59:34 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:34 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:34 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r2 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r2, &(0x7f0000000180), 0x14) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000700), 0x4) 07:59:34 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) 07:59:34 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:34 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r1, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x6) 07:59:34 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) 07:59:34 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x28080, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000001600)=0x0) socket$kcm(0x29, 0x2, 0x0) sendmmsg$nfc_llcp(r1, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r2, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) bind$nfc_llcp(r0, &(0x7f0000000140)={0x27, r2, 0x0, 0x7, 0x40, 0xf7, "b2796c9b8250dc153ba2fd041b6a3e6ed0e4e61e95b009328ce1412ec06914596a13ab12bd73884a80b0128663c85c832eeb225a5df94aeea93ac1523d865a", 0xd}, 0x60) 07:59:34 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:34 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r2 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r2, &(0x7f0000000180), 0x14) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000700), 0x4) 07:59:34 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:34 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) 07:59:34 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r1, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x6) 07:59:34 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x28080, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001600)=0x0) socket$kcm(0x29, 0x2, 0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r1, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) 07:59:34 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000700), 0x4) 07:59:34 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:34 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:34 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001600)) renameat2(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x6) 07:59:34 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:34 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x28080, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001600)) socket$kcm(0x29, 0x2, 0x0) 07:59:34 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) 07:59:34 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:34 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000700), 0x4) 07:59:34 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:35 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)) renameat2(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x6) 07:59:35 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:35 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000700), 0x4) 07:59:35 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) 07:59:35 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:35 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x6) 07:59:35 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x28080, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001600)) 07:59:35 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007"], 0x0, 0x70, 0x0, 0x1, 0x4d}, 0x20) 07:59:35 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) 07:59:35 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:35 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000700), 0x4) 07:59:35 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x6) 07:59:35 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:35 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x28080, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)) 07:59:35 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x48) renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x6) 07:59:35 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) 07:59:35 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007"], 0x0, 0x70, 0x0, 0x0, 0x4d}, 0x20) 07:59:35 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000700), 0x4) 07:59:35 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x6) 07:59:35 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x28080, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) 07:59:35 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) 07:59:35 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:35 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000700), 0x4) 07:59:35 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007"], 0x0, 0x70}, 0x20) 07:59:35 executing program 2: renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x6) 07:59:35 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800"], &(0x7f00000004c0)=""/152, 0x70, 0x98, 0x1, 0x4d}, 0x20) 07:59:35 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x141200, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000700), 0x4) 07:59:35 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x28080, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 07:59:35 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) 07:59:35 executing program 2: renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x6) 07:59:36 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x28080, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001600)) socket$kcm(0x29, 0x2, 0x0) 07:59:36 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007"], 0x0, 0x70, 0x0, 0x1, 0x4d}, 0x20) 07:59:36 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) 07:59:36 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x141200, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000700), 0x4) 07:59:36 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x28080, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) 07:59:36 executing program 2: renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6) 07:59:36 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) 07:59:36 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) 07:59:36 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x141200, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000700), 0x4) 07:59:36 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007"], 0x0, 0x70, 0x0, 0x0, 0x4d}, 0x20) 07:59:36 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x28080, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) 07:59:36 executing program 2: renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 07:59:36 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000700), 0x4) 07:59:36 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180007"], 0x0, 0x70}, 0x20) 07:59:36 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, &(0x7f0000002840)={0x27, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x6, 0x1, 0x5}) 07:59:36 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x28080, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 07:59:36 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) 07:59:36 executing program 1: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000700), 0x4) 07:59:36 executing program 2: renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 07:59:36 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000002c0)={0x1, 0x0, [{0xefc5eb148538412c, 0x24, &(0x7f0000000280)=""/36}]}) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001600)) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) 07:59:36 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x28080, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 07:59:36 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r4, &(0x7f0000000240), &(0x7f0000000280)=0x14) 07:59:36 executing program 1: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000700), 0x4) 07:59:36 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) 07:59:36 executing program 2: renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 07:59:36 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r4, &(0x7f0000000240), &(0x7f0000000280)=0x14) 07:59:36 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x28080, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) 07:59:36 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x0, 0x1, 0x0, 0x3, 0x4, 0x18, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x890b, 0x2c, &(0x7f0000000040)=""/44, 0x41100, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x7, 0x200}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[r0, r0], &(0x7f00000002c0)=[{0x3, 0x4, 0xd, 0x7}, {0x0, 0x3, 0x2, 0x9}, {0x3, 0x3, 0x7}, {0x2, 0x4, 0x10, 0x2}, {0x4, 0x5, 0xd, 0xc}, {0x8001, 0x5, 0xc, 0x1}], 0x10, 0x101}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=0xffffffffffffffff, 0x32, 0x1, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x8, r1, @prog_id=0xffffffffffffffff, r3}, 0x20) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0]}) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:36 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x0, 0x1, 0x0, 0x3, 0x4, 0x18, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x890b, 0x2c, &(0x7f0000000040)=""/44, 0x41100, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x7, 0x200}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[r0, r0], &(0x7f00000002c0)=[{0x3, 0x4, 0xd, 0x7}, {0x0, 0x3, 0x2, 0x9}, {0x3, 0x3, 0x7}, {0x2, 0x4, 0x10, 0x2}, {0x4, 0x5, 0xd, 0xc}, {0x8001, 0x5, 0xc, 0x1}], 0x10, 0x101}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=0xffffffffffffffff, 0x32, 0x1, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x8, r1, @prog_id=0xffffffffffffffff, r3}, 0x20) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0]}) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:36 executing program 1: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000700), 0x4) 07:59:37 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) 07:59:37 executing program 4: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000700), 0x4) 07:59:37 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x28080, 0x0) 07:59:37 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x0, 0x1, 0x0, 0x3, 0x4, 0x18, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x890b, 0x2c, &(0x7f0000000040)=""/44, 0x41100, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x7, 0x200}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[r0, r0], &(0x7f00000002c0)=[{0x3, 0x4, 0xd, 0x7}, {0x0, 0x3, 0x2, 0x9}, {0x3, 0x3, 0x7}, {0x2, 0x4, 0x10, 0x2}, {0x4, 0x5, 0xd, 0xc}, {0x8001, 0x5, 0xc, 0x1}], 0x10, 0x101}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=0xffffffffffffffff, 0x32, 0x1, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x8, r1, @prog_id=0xffffffffffffffff, r3}, 0x20) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0]}) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:37 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) 07:59:37 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x0, 0x1, 0x0, 0x3, 0x4, 0x18, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x890b, 0x2c, &(0x7f0000000040)=""/44, 0x41100, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x7, 0x200}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[r0, r0], &(0x7f00000002c0)=[{0x3, 0x4, 0xd, 0x7}, {0x0, 0x3, 0x2, 0x9}, {0x3, 0x3, 0x7}, {0x2, 0x4, 0x10, 0x2}, {0x4, 0x5, 0xd, 0xc}, {0x8001, 0x5, 0xc, 0x1}], 0x10, 0x101}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=0xffffffffffffffff, 0x32, 0x1, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x8, r1, @prog_id=0xffffffffffffffff, r3}, 0x20) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0]}) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:37 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) 07:59:37 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x28080, 0x0) 07:59:37 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0x3, &(0x7f0000000280)=""/4096, 0x1000) 07:59:37 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x0, 0x1, 0x0, 0x3, 0x4, 0x18, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x890b, 0x2c, &(0x7f0000000040)=""/44, 0x41100, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x7, 0x200}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[r0, r0], &(0x7f00000002c0)=[{0x3, 0x4, 0xd, 0x7}, {0x0, 0x3, 0x2, 0x9}, {0x3, 0x3, 0x7}, {0x2, 0x4, 0x10, 0x2}, {0x4, 0x5, 0xd, 0xc}, {0x8001, 0x5, 0xc, 0x1}], 0x10, 0x101}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=0xffffffffffffffff, 0x32, 0x1, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x8, r1, @prog_id=0xffffffffffffffff, r3}, 0x20) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0]}) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:37 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket(0x3, 0xa, 0x57) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x16f000, 0x0) 07:59:37 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x0, 0x1, 0x0, 0x3, 0x4, 0x18, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x890b, 0x2c, &(0x7f0000000040)=""/44, 0x41100, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x7, 0x200}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[r0, r0], &(0x7f00000002c0)=[{0x3, 0x4, 0xd, 0x7}, {0x0, 0x3, 0x2, 0x9}, {0x3, 0x3, 0x7}, {0x2, 0x4, 0x10, 0x2}, {0x4, 0x5, 0xd, 0xc}, {0x8001, 0x5, 0xc, 0x1}], 0x10, 0x101}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=0xffffffffffffffff, 0x32, 0x1, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x8, r1, @prog_id=0xffffffffffffffff, r3}, 0x20) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0]}) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:37 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) 07:59:37 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x28080, 0x0) 07:59:37 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000002c0)={0x1, 0x0, [{0xefc5eb148538412c, 0x24, &(0x7f0000000280)=""/36}]}) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001600)=0x0) ioctl$IMCTRLREQ(r3, 0x80044945, &(0x7f0000000400)={0x20, 0x4, 0x6, 0x9}) sendmmsg$nfc_llcp(r3, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r4, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="010600"/16], 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) 07:59:37 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x0, 0x1, 0x0, 0x3, 0x4, 0x18, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x890b, 0x2c, &(0x7f0000000040)=""/44, 0x41100, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x7, 0x200}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[r0, r0], &(0x7f00000002c0)=[{0x3, 0x4, 0xd, 0x7}, {0x0, 0x3, 0x2, 0x9}, {0x3, 0x3, 0x7}, {0x2, 0x4, 0x10, 0x2}, {0x4, 0x5, 0xd, 0xc}, {0x8001, 0x5, 0xc, 0x1}], 0x10, 0x101}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=0xffffffffffffffff, 0x32, 0x1, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x8, r1, @prog_id=0xffffffffffffffff, r3}, 0x20) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0]}) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 07:59:37 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000002c0)={0x1, 0x0, [{0xefc5eb148538412c, 0x24, &(0x7f0000000280)=""/36}]}) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001600)=0x0) ioctl$IMCTRLREQ(r3, 0x80044945, &(0x7f0000000400)={0x20, 0x4, 0x6, 0x9}) sendmmsg$nfc_llcp(r3, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r4, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="010600"/16], 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) 07:59:37 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x0, 0x1, 0x0, 0x3, 0x4, 0x18, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x890b, 0x2c, &(0x7f0000000040)=""/44, 0x41100, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x7, 0x200}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[r0, r0], &(0x7f00000002c0)=[{0x3, 0x4, 0xd, 0x7}, {0x0, 0x3, 0x2, 0x9}, {0x3, 0x3, 0x7}, {0x2, 0x4, 0x10, 0x2}, {0x4, 0x5, 0xd, 0xc}, {0x8001, 0x5, 0xc, 0x1}], 0x10, 0x101}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=0xffffffffffffffff, 0x32, 0x1, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x8, r1, @prog_id=0xffffffffffffffff, r3}, 0x20) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0]}) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 07:59:37 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x28080, 0x0) 07:59:37 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) 07:59:37 executing program 1: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@ifindex, 0xffffffffffffffff, 0x5, 0x0, 0xffffffffffffffff, @prog_fd}, 0x20) 07:59:37 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x0, 0x1, 0x0, 0x3, 0x4, 0x18, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x890b, 0x2c, &(0x7f0000000040)=""/44, 0x41100, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x7, 0x200}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[r0, r0], &(0x7f00000002c0)=[{0x3, 0x4, 0xd, 0x7}, {0x0, 0x3, 0x2, 0x9}, {0x3, 0x3, 0x7}, {0x2, 0x4, 0x10, 0x2}, {0x4, 0x5, 0xd, 0xc}, {0x8001, 0x5, 0xc, 0x1}], 0x10, 0x101}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=0xffffffffffffffff, 0x32, 0x1, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x8, r1, @prog_id=0xffffffffffffffff, r3}, 0x20) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0]}) syz_io_uring_submit(0x0, 0x0, 0x0) 07:59:37 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x0, 0x1, 0x0, 0x3, 0x4, 0x18, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x890b, 0x2c, &(0x7f0000000040)=""/44, 0x41100, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x7, 0x200}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[r0, r0], &(0x7f00000002c0)=[{0x3, 0x4, 0xd, 0x7}, {0x0, 0x3, 0x2, 0x9}, {0x3, 0x3, 0x7}, {0x2, 0x4, 0x10, 0x2}, {0x4, 0x5, 0xd, 0xc}, {0x8001, 0x5, 0xc, 0x1}], 0x10, 0x101}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=0xffffffffffffffff, 0x32, 0x1, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x8, r1, @prog_id=0xffffffffffffffff, r3}, 0x20) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0]}) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 07:59:37 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x0, 0x1, 0x0, 0x3, 0x4, 0x18, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x890b, 0x2c, &(0x7f0000000040)=""/44, 0x41100, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x7, 0x200}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[r0, r0], &(0x7f00000002c0)=[{0x3, 0x4, 0xd, 0x7}, {0x0, 0x3, 0x2, 0x9}, {0x3, 0x3, 0x7}, {0x2, 0x4, 0x10, 0x2}, {0x4, 0x5, 0xd, 0xc}, {0x8001, 0x5, 0xc, 0x1}], 0x10, 0x101}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=0xffffffffffffffff, 0x32, 0x1, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x8, r1, @prog_id=0xffffffffffffffff, r3}, 0x20) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0]}) syz_io_uring_submit(0x0, 0x0, 0x0) 07:59:37 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x28080, 0x0) 07:59:37 executing program 1: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@ifindex, 0xffffffffffffffff, 0x5, 0x0, 0xffffffffffffffff, @prog_fd}, 0x20) 07:59:37 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, 0x0) 07:59:37 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r0 = openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_logging(r0, &(0x7f0000000000)=0x2, 0x14) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) connect$nfc_llcp(r1, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 07:59:37 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x0, 0x1, 0x0, 0x3, 0x4, 0x18, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x890b, 0x2c, &(0x7f0000000040)=""/44, 0x41100, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x7, 0x200}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[r0, r0], &(0x7f00000002c0)=[{0x3, 0x4, 0xd, 0x7}, {0x0, 0x3, 0x2, 0x9}, {0x3, 0x3, 0x7}, {0x2, 0x4, 0x10, 0x2}, {0x4, 0x5, 0xd, 0xc}, {0x8001, 0x5, 0xc, 0x1}], 0x10, 0x101}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=0xffffffffffffffff, 0x32, 0x1, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x8, r1, @prog_id=0xffffffffffffffff, r3}, 0x20) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0]}) 07:59:37 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x0, 0x1, 0x0, 0x3, 0x4, 0x18, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x890b, 0x2c, &(0x7f0000000040)=""/44, 0x41100, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x7, 0x200}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[r0, r0], &(0x7f00000002c0)=[{0x3, 0x4, 0xd, 0x7}, {0x0, 0x3, 0x2, 0x9}, {0x3, 0x3, 0x7}, {0x2, 0x4, 0x10, 0x2}, {0x4, 0x5, 0xd, 0xc}, {0x8001, 0x5, 0xc, 0x1}], 0x10, 0x101}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=0xffffffffffffffff, 0x32, 0x1, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x8, r1, @prog_id=0xffffffffffffffff, r3}, 0x20) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0]}) 07:59:37 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x28080, 0x0) 07:59:38 executing program 1: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@ifindex, 0xffffffffffffffff, 0x5, 0x0, 0xffffffffffffffff, @prog_fd}, 0x20) 07:59:38 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, 0x0) 07:59:38 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r0 = openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_logging(r0, &(0x7f0000000000)=0x2, 0x14) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) connect$nfc_llcp(r1, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 07:59:38 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x0, 0x1, 0x0, 0x3, 0x4, 0x18, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x890b, 0x2c, &(0x7f0000000040)=""/44, 0x41100, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x7, 0x200}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[r0, r0], &(0x7f00000002c0)=[{0x3, 0x4, 0xd, 0x7}, {0x0, 0x3, 0x2, 0x9}, {0x3, 0x3, 0x7}, {0x2, 0x4, 0x10, 0x2}, {0x4, 0x5, 0xd, 0xc}, {0x8001, 0x5, 0xc, 0x1}], 0x10, 0x101}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x32, 0x1, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x8, r1, @prog_id=0xffffffffffffffff, r2}, 0x20) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) 07:59:38 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x28080, 0x0) 07:59:38 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x0, 0x1, 0x0, 0x3, 0x4, 0x18, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x890b, 0x2c, &(0x7f0000000040)=""/44, 0x41100, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x7, 0x200}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[r0, r0], &(0x7f00000002c0)=[{0x3, 0x4, 0xd, 0x7}, {0x0, 0x3, 0x2, 0x9}, {0x3, 0x3, 0x7}, {0x2, 0x4, 0x10, 0x2}, {0x4, 0x5, 0xd, 0xc}, {0x8001, 0x5, 0xc, 0x1}], 0x10, 0x101}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x32, 0x1, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x8, r1, @prog_id=0xffffffffffffffff, r2}, 0x20) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) 07:59:38 executing program 1: bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 07:59:38 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x0, 0x1, 0x0, 0x3, 0x4, 0x18, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x890b, 0x2c, &(0x7f0000000040)=""/44, 0x41100, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x7, 0x200}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[r0, r0], &(0x7f00000002c0)=[{0x3, 0x4, 0xd, 0x7}, {0x0, 0x3, 0x2, 0x9}, {0x3, 0x3, 0x7}, {0x2, 0x4, 0x10, 0x2}, {0x4, 0x5, 0xd, 0xc}, {0x8001, 0x5, 0xc, 0x1}], 0x10, 0x101}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x32, 0x1, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x8, r1, @prog_id=0xffffffffffffffff, r2}, 0x20) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 07:59:38 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, 0x0) 07:59:38 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r0 = openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_logging(r0, &(0x7f0000000000)=0x2, 0x14) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) connect$nfc_llcp(r1, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 07:59:38 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 07:59:38 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x0, 0x1, 0x0, 0x3, 0x4, 0x18, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x890b, 0x2c, &(0x7f0000000040)=""/44, 0x41100, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x7, 0x200}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[r0, r0], &(0x7f00000002c0)=[{0x3, 0x4, 0xd, 0x7}, {0x0, 0x3, 0x2, 0x9}, {0x3, 0x3, 0x7}, {0x2, 0x4, 0x10, 0x2}, {0x4, 0x5, 0xd, 0xc}, {0x8001, 0x5, 0xc, 0x1}], 0x10, 0x101}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x32, 0x1, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x8, r1, @prog_id=0xffffffffffffffff, r2}, 0x20) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 07:59:38 executing program 1: bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 07:59:38 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x0, 0x1, 0x0, 0x3, 0x4, 0x18, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x890b, 0x2c, &(0x7f0000000040)=""/44, 0x41100, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x7, 0x200}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[r0, r0], &(0x7f00000002c0)=[{0x3, 0x4, 0xd, 0x7}, {0x0, 0x3, 0x2, 0x9}, {0x3, 0x3, 0x7}, {0x2, 0x4, 0x10, 0x2}, {0x4, 0x5, 0xd, 0xc}, {0x8001, 0x5, 0xc, 0x1}], 0x10, 0x101}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x32, 0x1, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x8, r1, @prog_id=0xffffffffffffffff, r2}, 0x20) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 07:59:38 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000003c0)=0x0) 07:59:38 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r0 = openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_logging(r0, &(0x7f0000000000)=0x2, 0x14) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) connect$nfc_llcp(r1, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:38 executing program 1: bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 07:59:38 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x0, 0x1, 0x0, 0x3, 0x4, 0x18, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x890b, 0x2c, &(0x7f0000000040)=""/44, 0x41100, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x7, 0x200}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[r0, r0], &(0x7f00000002c0)=[{0x3, 0x4, 0xd, 0x7}, {0x0, 0x3, 0x2, 0x9}, {0x3, 0x3, 0x7}, {0x2, 0x4, 0x10, 0x2}, {0x4, 0x5, 0xd, 0xc}, {0x8001, 0x5, 0xc, 0x1}], 0x10, 0x101}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x32, 0x1, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x8, r1, @prog_id=0xffffffffffffffff, r2}, 0x20) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) 07:59:38 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 07:59:38 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x0, 0x1, 0x0, 0x3, 0x4, 0x18, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x890b, 0x2c, &(0x7f0000000040)=""/44, 0x41100, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x7, 0x200}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[r0, r0], &(0x7f00000002c0)=[{0x3, 0x4, 0xd, 0x7}, {0x0, 0x3, 0x2, 0x9}, {0x3, 0x3, 0x7}, {0x2, 0x4, 0x10, 0x2}, {0x4, 0x5, 0xd, 0xc}, {0x8001, 0x5, 0xc, 0x1}], 0x10, 0x101}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x32, 0x1, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x8, r1, @prog_id=0xffffffffffffffff, r2}, 0x20) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 07:59:38 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 07:59:38 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x0, 0x1, 0x0, 0x3, 0x4, 0x18, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x890b, 0x2c, &(0x7f0000000040)=""/44, 0x41100, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x7, 0x200}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[r0, r0], &(0x7f00000002c0)=[{0x3, 0x4, 0xd, 0x7}, {0x0, 0x3, 0x2, 0x9}, {0x3, 0x3, 0x7}, {0x2, 0x4, 0x10, 0x2}, {0x4, 0x5, 0xd, 0xc}, {0x8001, 0x5, 0xc, 0x1}], 0x10, 0x101}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x32, 0x1, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x8, r1, @prog_id=0xffffffffffffffff, r2}, 0x20) 07:59:38 executing program 1: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @prog_fd}, 0x20) 07:59:38 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r0 = openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_logging(r0, &(0x7f0000000000)=0x2, 0x14) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:38 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 07:59:38 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 07:59:38 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x0, 0x1, 0x0, 0x3, 0x4, 0x18, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x890b, 0x2c, &(0x7f0000000040)=""/44, 0x41100, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x7, 0x200}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[r0, r0], &(0x7f00000002c0)=[{0x3, 0x4, 0xd, 0x7}, {0x0, 0x3, 0x2, 0x9}, {0x3, 0x3, 0x7}, {0x2, 0x4, 0x10, 0x2}, {0x4, 0x5, 0xd, 0xc}, {0x8001, 0x5, 0xc, 0x1}], 0x10, 0x101}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x32, 0x1, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x8, r1, @prog_id=0xffffffffffffffff, r2}, 0x20) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) 07:59:38 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r0 = openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_logging(r0, &(0x7f0000000000)=0x2, 0x14) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:38 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x0, 0x1, 0x0, 0x3, 0x4, 0x18, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x890b, 0x2c, &(0x7f0000000040)=""/44, 0x41100, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x7, 0x200}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[r0, r0], &(0x7f00000002c0)=[{0x3, 0x4, 0xd, 0x7}, {0x0, 0x3, 0x2, 0x9}, {0x3, 0x3, 0x7}, {0x2, 0x4, 0x10, 0x2}, {0x4, 0x5, 0xd, 0xc}, {0x8001, 0x5, 0xc, 0x1}], 0x10, 0x101}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x8, r1, @prog_id=0xffffffffffffffff}, 0x20) 07:59:39 executing program 1: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @prog_fd}, 0x20) 07:59:39 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r0 = openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_logging(r0, &(0x7f0000000000)=0x2, 0x14) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) connect$nfc_llcp(r1, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:39 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 07:59:39 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x0, 0x1, 0x0, 0x3, 0x4, 0x18, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x890b, 0x2c, &(0x7f0000000040)=""/44, 0x41100, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x7, 0x200}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[r0, r0], &(0x7f00000002c0)=[{0x3, 0x4, 0xd, 0x7}, {0x0, 0x3, 0x2, 0x9}, {0x3, 0x3, 0x7}, {0x2, 0x4, 0x10, 0x2}, {0x4, 0x5, 0xd, 0xc}, {0x8001, 0x5, 0xc, 0x1}], 0x10, 0x101}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x32, 0x1, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x8, r1, @prog_id=0xffffffffffffffff, r2}, 0x20) 07:59:39 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r0 = openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_logging(r0, &(0x7f0000000000)=0x2, 0x14) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:39 executing program 1: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @prog_fd}, 0x20) 07:59:39 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, 0x0) 07:59:39 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x8, 0xffffffffffffffff, @prog_id=0xffffffffffffffff}, 0x20) 07:59:39 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) 07:59:39 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x0, 0x1, 0x0, 0x3, 0x4, 0x18, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x890b, 0x2c, &(0x7f0000000040)=""/44, 0x41100, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x7, 0x200}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[r0, r0], &(0x7f00000002c0)=[{0x3, 0x4, 0xd, 0x7}, {0x0, 0x3, 0x2, 0x9}, {0x3, 0x3, 0x7}, {0x2, 0x4, 0x10, 0x2}, {0x4, 0x5, 0xd, 0xc}, {0x8001, 0x5, 0xc, 0x1}], 0x10, 0x101}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x32, 0x1, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 07:59:39 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket(0x3, 0xa, 0x57) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x16f000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r0}) 07:59:39 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r0 = openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_logging(r0, &(0x7f0000000000)=0x2, 0x14) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) connect$nfc_llcp(r1, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:39 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) 07:59:39 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000002c0)={0x1, 0x0, [{0xefc5eb148538412c, 0x24, &(0x7f0000000280)=""/36}]}) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001600)=0x0) ioctl$IMCTRLREQ(r3, 0x80044945, &(0x7f0000000400)={0x20, 0x4, 0x6, 0x9}) sendmmsg$nfc_llcp(r3, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r4, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="010600"/16], 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r5, 0x8002af76, &(0x7f00000007c0)) ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) 07:59:39 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x8, 0xffffffffffffffff, @prog_id=0xffffffffffffffff}, 0x20) 07:59:39 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x32, 0x1, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 07:59:39 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000002c0)={0x1, 0x0, [{0xefc5eb148538412c, 0x24, &(0x7f0000000280)=""/36}]}) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001600)=0x0) ioctl$IMCTRLREQ(r3, 0x80044945, &(0x7f0000000400)={0x20, 0x4, 0x6, 0x9}) sendmmsg$nfc_llcp(r3, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r4, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="010600"/16], 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r5, 0x8002af76, &(0x7f00000007c0)) ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) 07:59:39 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) 07:59:39 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r0 = openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_logging(r0, &(0x7f0000000000)=0x2, 0x14) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) connect$nfc_llcp(r1, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:39 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x8, 0xffffffffffffffff, @prog_id=0xffffffffffffffff}, 0x20) 07:59:39 executing program 5: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@ifindex, 0xffffffffffffffff, 0x0, 0x12, 0xffffffffffffffff, @prog_fd}, 0x20) 07:59:39 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x32, 0x1, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 07:59:39 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:39 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r0 = openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_logging(r0, &(0x7f0000000000)=0x2, 0x14) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) connect$nfc_llcp(r1, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:39 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x8, 0xffffffffffffffff, @prog_id=0xffffffffffffffff}, 0x20) 07:59:39 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:39 executing program 5: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@ifindex, 0xffffffffffffffff, 0x0, 0x12, 0xffffffffffffffff, @prog_fd}, 0x20) 07:59:39 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x32, 0x1, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 07:59:39 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r0 = openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_logging(r0, &(0x7f0000000000)=0x2, 0x14) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) connect$nfc_llcp(r1, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:39 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:39 executing program 2: bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 07:59:40 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:40 executing program 5: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@ifindex, 0xffffffffffffffff, 0x0, 0x12, 0xffffffffffffffff, @prog_fd}, 0x20) 07:59:40 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) connect$nfc_llcp(r0, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:40 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x32, 0x1, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 07:59:40 executing program 2: bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 07:59:40 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:40 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:40 executing program 3: bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 07:59:40 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) connect$nfc_llcp(r0, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:40 executing program 5: bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 07:59:40 executing program 2: bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 07:59:40 executing program 5: bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 07:59:40 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:40 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 07:59:40 executing program 3: bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 07:59:40 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) connect$nfc_llcp(r0, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:40 executing program 5: bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 07:59:40 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x0, 0x8, 0xffffffffffffffff, @prog_id=0xffffffffffffffff}, 0x20) 07:59:40 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) 07:59:40 executing program 3: bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 07:59:40 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 07:59:40 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) connect$nfc_llcp(r0, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:40 executing program 5: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @prog_fd}, 0x20) 07:59:40 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x0, 0x8, 0xffffffffffffffff, @prog_id=0xffffffffffffffff}, 0x20) 07:59:40 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) 07:59:40 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x0, 0x1, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 07:59:40 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) 07:59:40 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) connect$nfc_llcp(r0, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:40 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x0, 0x8, 0xffffffffffffffff, @prog_id=0xffffffffffffffff}, 0x20) 07:59:40 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 07:59:41 executing program 5: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @prog_fd}, 0x20) 07:59:41 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x0, 0x1, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 07:59:41 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) 07:59:41 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) connect$nfc_llcp(r0, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:41 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x0, 0xffffffffffffffff, @prog_id=0xffffffffffffffff}, 0x20) 07:59:41 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 07:59:41 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 07:59:41 executing program 5: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @prog_fd}, 0x20) 07:59:41 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) connect$nfc_llcp(r0, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:41 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x0, 0x1, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 07:59:41 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x0, 0xffffffffffffffff, @prog_id=0xffffffffffffffff}, 0x20) 07:59:41 executing program 5: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x0, 0xffffffffffffffff, @prog_id=0xffffffffffffffff}, 0x20) 07:59:41 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) 07:59:41 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 07:59:41 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x0, 0xffffffffffffffff, @prog_id=0xffffffffffffffff}, 0x20) 07:59:41 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x32, 0x0, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 07:59:41 executing program 5: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x0, 0xffffffffffffffff, @prog_id=0xffffffffffffffff}, 0x20) 07:59:41 executing program 4: syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:41 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) 07:59:41 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) 07:59:41 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x32, 0x0, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 07:59:41 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) 07:59:41 executing program 5: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x34, 0x0, 0xffffffffffffffff, @prog_id=0xffffffffffffffff}, 0x20) 07:59:41 executing program 4: syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:41 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) 07:59:41 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000180)=r1) 07:59:41 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) 07:59:41 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 07:59:41 executing program 5: bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 07:59:41 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000180)=r1) 07:59:41 executing program 4: syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:42 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000180)=r1) 07:59:42 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) 07:59:42 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 07:59:42 executing program 5: bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 07:59:42 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) connect$nfc_llcp(r0, 0x0, 0x0) 07:59:42 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000180)=r1) 07:59:42 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 07:59:42 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:42 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 07:59:42 executing program 5: bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 07:59:42 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 07:59:42 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000180)=r1) 07:59:42 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 07:59:42 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 07:59:42 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 07:59:42 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) syz_open_dev$dri(0x0, 0x3, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:42 executing program 5: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @prog_id=0xffffffffffffffff}, 0x20) 07:59:42 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 07:59:42 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) syz_open_dev$dri(0x0, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000180)) 07:59:42 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) 07:59:42 executing program 5: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @prog_id=0xffffffffffffffff}, 0x20) 07:59:42 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:42 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 07:59:42 executing program 4: bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 07:59:42 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) 07:59:42 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000180)) 07:59:42 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:42 executing program 5: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @prog_id=0xffffffffffffffff}, 0x20) 07:59:42 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 07:59:42 executing program 4: bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 07:59:43 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="10ffffff7f00"/16], 0x10, 0x24000880}], 0x2, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) getsockopt$nfc_llcp(r4, 0x118, 0x3, &(0x7f0000000280)=""/4096, 0x1000) 07:59:43 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000180)=r1) 07:59:43 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000180)) 07:59:43 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 07:59:43 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:43 executing program 4: bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 07:59:43 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000180)) 07:59:43 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:43 executing program 5: bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 07:59:43 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000180)) 07:59:43 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) 07:59:43 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:43 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 07:59:43 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) syz_open_dev$dri(0x0, 0x3, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:43 executing program 5: bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 07:59:43 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) 07:59:43 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000180)) 07:59:43 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:43 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:43 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 07:59:43 executing program 5: bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 07:59:43 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 07:59:43 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000180)) 07:59:43 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:43 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:43 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 07:59:43 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) 07:59:43 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 07:59:43 executing program 0: syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000180)) 07:59:43 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 07:59:44 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) 07:59:44 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:44 executing program 1: r0 = syz_open_dev$dri(0x0, 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000180)) 07:59:44 executing program 0: syz_open_dev$dri(0x0, 0x5, 0x80e41) 07:59:44 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) 07:59:44 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 07:59:44 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:44 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) 07:59:44 executing program 0: syz_open_dev$dri(0x0, 0x5, 0x80e41) 07:59:44 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) 07:59:44 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:44 executing program 1: r0 = syz_open_dev$dri(0x0, 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000180)) 07:59:44 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:44 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 07:59:44 executing program 0: syz_open_dev$dri(0x0, 0x5, 0x80e41) 07:59:44 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:44 executing program 1: r0 = syz_open_dev$dri(0x0, 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000180)) 07:59:44 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000180)=r1) 07:59:44 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:44 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 07:59:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000180)) 07:59:44 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:44 executing program 0: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80e41) 07:59:44 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:44 executing program 2: syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000180)) 07:59:44 executing program 0: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80e41) 07:59:44 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) 07:59:44 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) syz_open_dev$dri(0x0, 0x3, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:44 executing program 4: syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:44 executing program 0: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80e41) 07:59:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000180)) 07:59:44 executing program 2: syz_open_dev$dri(0x0, 0x5, 0x80e41) 07:59:45 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) 07:59:45 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:45 executing program 2: syz_open_dev$dri(0x0, 0x5, 0x80e41) 07:59:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000180)) 07:59:45 executing program 0: syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x0) 07:59:45 executing program 4: syz_open_dev$dri(0x0, 0x5, 0x80e41) 07:59:45 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000180)=r1) 07:59:45 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:45 executing program 0: syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x0) 07:59:45 executing program 1: syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000180)) 07:59:45 executing program 2: syz_open_dev$dri(0x0, 0x5, 0x80e41) 07:59:45 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:45 executing program 4: syz_open_dev$dri(0x0, 0x5, 0x80e41) 07:59:45 executing program 0: syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x0) 07:59:45 executing program 2: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80e41) 07:59:45 executing program 1: syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000180)) 07:59:45 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:45 executing program 4: syz_open_dev$dri(0x0, 0x5, 0x80e41) 07:59:45 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) syz_open_dev$dri(0x0, 0x3, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:45 executing program 0: syz_open_dev$dri(0x0, 0x5, 0x80e41) 07:59:45 executing program 2: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80e41) 07:59:45 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:45 executing program 1: syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000180)) 07:59:45 executing program 4: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80e41) 07:59:45 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:45 executing program 2: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80e41) 07:59:45 executing program 0: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80e41) 07:59:45 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:45 executing program 4: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80e41) 07:59:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, 0x0) 07:59:46 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:46 executing program 0: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80e41) 07:59:46 executing program 2: syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x0) 07:59:46 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:46 executing program 4: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80e41) 07:59:46 executing program 1: syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x0) 07:59:46 executing program 0: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80e41) 07:59:46 executing program 2: syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x0) 07:59:46 executing program 3: syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:46 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:46 executing program 4: syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x0) 07:59:46 executing program 1: syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x0) 07:59:46 executing program 2: syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x0) 07:59:46 executing program 0: syz_open_dev$dri(0x0, 0x0, 0x80e41) 07:59:46 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:46 executing program 3: syz_open_dev$dri(0x0, 0x5, 0x80e41) 07:59:46 executing program 4: syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x0) 07:59:46 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 07:59:46 executing program 1: syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x0) 07:59:46 executing program 0: syz_open_dev$dri(0x0, 0x0, 0x80e41) 07:59:46 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:46 executing program 3: syz_open_dev$dri(0x0, 0x5, 0x80e41) 07:59:46 executing program 4: syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x0) 07:59:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000180)) 07:59:46 executing program 1: syz_open_dev$dri(0x0, 0x5, 0x0) 07:59:46 executing program 3: syz_open_dev$dri(0x0, 0x5, 0x80e41) 07:59:46 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$isdn(0x22, 0x3, 0x26) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r1, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x3, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:46 executing program 0: syz_open_dev$dri(0x0, 0x0, 0x80e41) 07:59:46 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:46 executing program 1: syz_open_dev$dri(0x0, 0x5, 0x0) 07:59:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000180)) 07:59:47 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$isdn(0x22, 0x3, 0x26) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r1, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x3, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:47 executing program 1: syz_open_dev$dri(0x0, 0x5, 0x0) 07:59:47 executing program 5: syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80e41) 07:59:47 executing program 0: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) 07:59:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80e41) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000180)) 07:59:47 executing program 3: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80e41) 07:59:47 executing program 5: syz_open_dev$dri(0x0, 0x5, 0x80e41) 07:59:47 executing program 1: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) 07:59:47 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$isdn(0x22, 0x3, 0x26) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r1, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x3, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:47 executing program 0: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) 07:59:47 executing program 2: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80e41) 07:59:47 executing program 5: syz_open_dev$dri(0x0, 0x5, 0x80e41) 07:59:47 executing program 3: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80e41) 07:59:47 executing program 0: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) 07:59:47 executing program 1: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) 07:59:47 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$isdn(0x22, 0x3, 0x26) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r1, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x3, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:47 executing program 2: syz_open_dev$dri(0x0, 0x0, 0x80e41) 07:59:47 executing program 5: syz_open_dev$dri(0x0, 0x5, 0x80e41) 07:59:47 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="10ffffff7f00"/16], 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, &(0x7f0000000280)=""/4096, 0x1000) 07:59:47 executing program 1: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) 07:59:47 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$isdn(0x22, 0x3, 0x26) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 07:59:47 executing program 3: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80e41) 07:59:47 executing program 5: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80e41) 07:59:47 executing program 2: syz_open_dev$dri(0x0, 0x0, 0x80e41) 07:59:47 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair(0x15, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000200)) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f00000002c0)=""/61, 0x3d) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r3, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r4, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000000000000000000000000ef0b2ef4e65656"], 0x10, 0x24000880}], 0x2, 0x0) bind$nfc_llcp(r1, &(0x7f0000000140)={0x27, r4, 0xffffffffffffffff, 0x6, 0x7, 0x0, "9b3e69d7c81107d8e721a7316627e9f63f2f1fc983a83ad8dfc54a77e478ac37e4d96b7170701ddef27318d1233e846e565599c2a11fde611306c075519989", 0x2e}, 0x60) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000240)={0x400, 0x0, 0xffff}) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000280), &(0x7f0000000040)=0x4) connect$nfc_llcp(r0, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:47 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair(0x15, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000200)) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f00000002c0)=""/61, 0x3d) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r3, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r4, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000000000000000000000000ef0b2ef4e65656"], 0x10, 0x24000880}], 0x2, 0x0) bind$nfc_llcp(r1, &(0x7f0000000140)={0x27, r4, 0xffffffffffffffff, 0x6, 0x7, 0x0, "9b3e69d7c81107d8e721a7316627e9f63f2f1fc983a83ad8dfc54a77e478ac37e4d96b7170701ddef27318d1233e846e565599c2a11fde611306c075519989", 0x2e}, 0x60) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000240)={0x400, 0x0, 0xffff}) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000280), &(0x7f0000000040)=0x4) connect$nfc_llcp(r0, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:47 executing program 3: syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x0) 07:59:47 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$isdn(0x22, 0x3, 0x26) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) 07:59:48 executing program 5: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80e41) 07:59:48 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair(0x15, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000200)) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f00000002c0)=""/61, 0x3d) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r3, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r4, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000000000000000000000000ef0b2ef4e65656"], 0x10, 0x24000880}], 0x2, 0x0) bind$nfc_llcp(r1, &(0x7f0000000140)={0x27, r4, 0xffffffffffffffff, 0x6, 0x7, 0x0, "9b3e69d7c81107d8e721a7316627e9f63f2f1fc983a83ad8dfc54a77e478ac37e4d96b7170701ddef27318d1233e846e565599c2a11fde611306c075519989", 0x2e}, 0x60) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000240)={0x400, 0x0, 0xffff}) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000280), &(0x7f0000000040)=0x4) connect$nfc_llcp(r0, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:48 executing program 2: syz_open_dev$dri(0x0, 0x0, 0x80e41) 07:59:48 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000002c0)={0x1, 0x0, [{0xefc5eb148538412c, 0x24, &(0x7f0000000280)=""/36}]}) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001600)=0x0) ioctl$IMCTRLREQ(r3, 0x80044945, &(0x7f0000000400)={0x20, 0x4, 0x6, 0x9}) sendmmsg$nfc_llcp(r3, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r4, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="010600"/16], 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r5, 0x8002af76, &(0x7f00000007c0)) ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) sendmsg$nfc_llcp(r3, &(0x7f0000000780)={&(0x7f0000000440)={0x27, r4, 0xffffffffffffffff, 0x7, 0x1, 0x3f, "71a51401d28338ca119de09b57340348b25e61426d7f437e8b3e1eb681701fd13085a151fe5eb205b63bb822eee4f10ee77f1031cdd9789d9fc6dc79c64a25", 0x30}, 0x60, &(0x7f0000000740)=[{&(0x7f00000004c0)="8291e2e2652fb55867a0fafa6919f11dbd9fd70be5cf480cd7117aeaa91ef6b5edc535651b20776c33549983e5f3d6a890a6e900c4caa1563d0b52b62ce2d9d0edf17d499594c44d12201a81c4736618e310ff50fe03d23b94a08f70ebb069b7b8f8c32fdcc3dada6212efa48791671dd2e27c247171106c5ce3573b3221376309ded509c3215c06e988843aa8f43f83362441096337e7f4bc493d4081526f96ee6cab465f7b95c68793", 0xaa}, {&(0x7f0000000580)="86a30c1a72c6c268733c01cfcc2db797c2a541d27a978fa0d4afa862c9c841367b17a6427e19f85b46624d3d62dd9a074a0a2284b5ce53b5dca8b0d72a31b584da84d5025fc6bee7b59630e3bb5d7ce1380e584422b07c2bb11b91565cf7d03cf43edb3281f73d7b1eea5eb36a389f0d3e321d6336ed1e90054ccd5937cbe98f298194d442a3137e9bb83c11d6f58c456b9a05604c8ed3d7bafb40e62d8c58226b15467e95f28adfe50dd5c1bf60aa89ae4c08a4", 0xb4}, {&(0x7f0000000640)="c584cba4a3f6db73976d8c902b1816edf2a147c8058ec6fe6281f88c297859db84d2e909879b339fcca6fd375abd471db0a910d4c0907420fe41a73fadf745b31c490efda3c689862fe3ee64ef39c3bc66dc1932bd6636fc145163c58bcbdeb8ef7634b1e736582e5cf366ebd337136d95307f73d7b0baf9a920ef379d2a7af5a03d2fad8143b781a33f3acb96812b376cb9f2f3ea5372bc5b4aed6b6314b29902875f9068eeed6dfe85cbab32039355902d849fc9206e94b0d74b73df7a34559ebd8c6aa131f677bdc3bfa23d346673c0e103ab7f5fed06a2b1176585e32a", 0xdf}], 0x3, &(0x7f0000000800)={0x48, 0x115, 0x8, "e42a55de9b084f34daab7f227a6df81597d7617758b9943e7475bbbac9c37acb09a87c13abae0d90a3b61ee184928d2279"}, 0x48}, 0xc0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r6, &(0x7f0000000300)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053", 0x3e}, 0x60) 07:59:48 executing program 3: syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x0) 07:59:48 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$isdn(0x22, 0x3, 0x26) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) 07:59:48 executing program 5: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80e41) 07:59:48 executing program 2: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) 07:59:48 executing program 3: syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x0) 07:59:48 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair(0x15, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000200)) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f00000002c0)=""/61, 0x3d) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r3, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r4, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000000000000000000000000ef0b2ef4e65656"], 0x10, 0x24000880}], 0x2, 0x0) bind$nfc_llcp(r1, &(0x7f0000000140)={0x27, r4, 0xffffffffffffffff, 0x6, 0x7, 0x0, "9b3e69d7c81107d8e721a7316627e9f63f2f1fc983a83ad8dfc54a77e478ac37e4d96b7170701ddef27318d1233e846e565599c2a11fde611306c075519989", 0x2e}, 0x60) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000240)={0x400, 0x0, 0xffff}) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000280), &(0x7f0000000040)=0x4) connect$nfc_llcp(r0, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:48 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000002c0)={0x1, 0x0, [{0xefc5eb148538412c, 0x24, &(0x7f0000000280)=""/36}]}) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001600)=0x0) ioctl$IMCTRLREQ(r3, 0x80044945, &(0x7f0000000400)={0x20, 0x4, 0x6, 0x9}) sendmmsg$nfc_llcp(r3, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r4, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="010600"/16], 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r5, 0x8002af76, &(0x7f00000007c0)) ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) sendmsg$nfc_llcp(r3, &(0x7f0000000780)={&(0x7f0000000440)={0x27, r4, 0xffffffffffffffff, 0x7, 0x1, 0x3f, "71a51401d28338ca119de09b57340348b25e61426d7f437e8b3e1eb681701fd13085a151fe5eb205b63bb822eee4f10ee77f1031cdd9789d9fc6dc79c64a25", 0x30}, 0x60, &(0x7f0000000740)=[{&(0x7f00000004c0)="8291e2e2652fb55867a0fafa6919f11dbd9fd70be5cf480cd7117aeaa91ef6b5edc535651b20776c33549983e5f3d6a890a6e900c4caa1563d0b52b62ce2d9d0edf17d499594c44d12201a81c4736618e310ff50fe03d23b94a08f70ebb069b7b8f8c32fdcc3dada6212efa48791671dd2e27c247171106c5ce3573b3221376309ded509c3215c06e988843aa8f43f83362441096337e7f4bc493d4081526f96ee6cab465f7b95c68793", 0xaa}, {&(0x7f0000000580)="86a30c1a72c6c268733c01cfcc2db797c2a541d27a978fa0d4afa862c9c841367b17a6427e19f85b46624d3d62dd9a074a0a2284b5ce53b5dca8b0d72a31b584da84d5025fc6bee7b59630e3bb5d7ce1380e584422b07c2bb11b91565cf7d03cf43edb3281f73d7b1eea5eb36a389f0d3e321d6336ed1e90054ccd5937cbe98f298194d442a3137e9bb83c11d6f58c456b9a05604c8ed3d7bafb40e62d8c58226b15467e95f28adfe50dd5c1bf60aa89ae4c08a4", 0xb4}, {&(0x7f0000000640)="c584cba4a3f6db73976d8c902b1816edf2a147c8058ec6fe6281f88c297859db84d2e909879b339fcca6fd375abd471db0a910d4c0907420fe41a73fadf745b31c490efda3c689862fe3ee64ef39c3bc66dc1932bd6636fc145163c58bcbdeb8ef7634b1e736582e5cf366ebd337136d95307f73d7b0baf9a920ef379d2a7af5a03d2fad8143b781a33f3acb96812b376cb9f2f3ea5372bc5b4aed6b6314b29902875f9068eeed6dfe85cbab32039355902d849fc9206e94b0d74b73df7a34559ebd8c6aa131f677bdc3bfa23d346673c0e103ab7f5fed06a2b1176585e32a", 0xdf}], 0x3, &(0x7f0000000800)={0x48, 0x115, 0x8, "e42a55de9b084f34daab7f227a6df81597d7617758b9943e7475bbbac9c37acb09a87c13abae0d90a3b61ee184928d2279"}, 0x48}, 0xc0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r6, &(0x7f0000000300)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053", 0x3e}, 0x60) 07:59:48 executing program 5: syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x0) 07:59:48 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$isdn(0x22, 0x3, 0x26) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 07:59:48 executing program 2: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) 07:59:48 executing program 3: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) 07:59:48 executing program 5: syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x0) 07:59:48 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair(0x15, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000200)) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f00000002c0)=""/61, 0x3d) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r3, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r4, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000000000000000000000000ef0b2ef4e65656"], 0x10, 0x24000880}], 0x2, 0x0) bind$nfc_llcp(r1, &(0x7f0000000140)={0x27, r4, 0xffffffffffffffff, 0x6, 0x7, 0x0, "9b3e69d7c81107d8e721a7316627e9f63f2f1fc983a83ad8dfc54a77e478ac37e4d96b7170701ddef27318d1233e846e565599c2a11fde611306c075519989", 0x2e}, 0x60) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000240)={0x400, 0x0, 0xffff}) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000280), &(0x7f0000000040)=0x4) 07:59:48 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$isdn(0x22, 0x3, 0x26) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 07:59:48 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000002c0)={0x1, 0x0, [{0xefc5eb148538412c, 0x24, &(0x7f0000000280)=""/36}]}) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001600)=0x0) ioctl$IMCTRLREQ(r3, 0x80044945, &(0x7f0000000400)={0x20, 0x4, 0x6, 0x9}) sendmmsg$nfc_llcp(r3, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r4, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="010600"/16], 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r5, 0x8002af76, &(0x7f00000007c0)) ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) sendmsg$nfc_llcp(r3, &(0x7f0000000780)={&(0x7f0000000440)={0x27, r4, 0xffffffffffffffff, 0x7, 0x1, 0x3f, "71a51401d28338ca119de09b57340348b25e61426d7f437e8b3e1eb681701fd13085a151fe5eb205b63bb822eee4f10ee77f1031cdd9789d9fc6dc79c64a25", 0x30}, 0x60, &(0x7f0000000740)=[{&(0x7f00000004c0)="8291e2e2652fb55867a0fafa6919f11dbd9fd70be5cf480cd7117aeaa91ef6b5edc535651b20776c33549983e5f3d6a890a6e900c4caa1563d0b52b62ce2d9d0edf17d499594c44d12201a81c4736618e310ff50fe03d23b94a08f70ebb069b7b8f8c32fdcc3dada6212efa48791671dd2e27c247171106c5ce3573b3221376309ded509c3215c06e988843aa8f43f83362441096337e7f4bc493d4081526f96ee6cab465f7b95c68793", 0xaa}, {&(0x7f0000000580)="86a30c1a72c6c268733c01cfcc2db797c2a541d27a978fa0d4afa862c9c841367b17a6427e19f85b46624d3d62dd9a074a0a2284b5ce53b5dca8b0d72a31b584da84d5025fc6bee7b59630e3bb5d7ce1380e584422b07c2bb11b91565cf7d03cf43edb3281f73d7b1eea5eb36a389f0d3e321d6336ed1e90054ccd5937cbe98f298194d442a3137e9bb83c11d6f58c456b9a05604c8ed3d7bafb40e62d8c58226b15467e95f28adfe50dd5c1bf60aa89ae4c08a4", 0xb4}, {&(0x7f0000000640)="c584cba4a3f6db73976d8c902b1816edf2a147c8058ec6fe6281f88c297859db84d2e909879b339fcca6fd375abd471db0a910d4c0907420fe41a73fadf745b31c490efda3c689862fe3ee64ef39c3bc66dc1932bd6636fc145163c58bcbdeb8ef7634b1e736582e5cf366ebd337136d95307f73d7b0baf9a920ef379d2a7af5a03d2fad8143b781a33f3acb96812b376cb9f2f3ea5372bc5b4aed6b6314b29902875f9068eeed6dfe85cbab32039355902d849fc9206e94b0d74b73df7a34559ebd8c6aa131f677bdc3bfa23d346673c0e103ab7f5fed06a2b1176585e32a", 0xdf}], 0x3, &(0x7f0000000800)={0x48, 0x115, 0x8, "e42a55de9b084f34daab7f227a6df81597d7617758b9943e7475bbbac9c37acb09a87c13abae0d90a3b61ee184928d2279"}, 0x48}, 0xc0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r6, &(0x7f0000000300)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053", 0x3e}, 0x60) 07:59:48 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket(0x3, 0xa, 0x57) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x16f000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, r1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r3, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:48 executing program 2: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) 07:59:48 executing program 5: syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x0) 07:59:48 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$isdn(0x22, 0x3, 0x26) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) 07:59:48 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4004, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id, r1}, 0x20) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000002840)={0x27, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:48 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4004, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id, r1}, 0x20) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000002840)={0x27, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:48 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair(0x15, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f00000002c0)=""/61, 0x3d) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000000000000000000000000ef0b2ef4e65656"], 0x10, 0x24000880}], 0x2, 0x0) bind$nfc_llcp(r1, &(0x7f0000000140)={0x27, r3, 0xffffffffffffffff, 0x6, 0x7, 0x0, "9b3e69d7c81107d8e721a7316627e9f63f2f1fc983a83ad8dfc54a77e478ac37e4d96b7170701ddef27318d1233e846e565599c2a11fde611306c075519989", 0x2e}, 0x60) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000240)={0x400, 0x0, 0xffff}) 07:59:48 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$isdn(0x22, 0x3, 0x26) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 07:59:48 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4004, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id, r1}, 0x20) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000002840)={0x27, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:48 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4004, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id, r1}, 0x20) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000002840)={0x27, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:48 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair(0x15, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000200)) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f00000002c0)=""/61, 0x3d) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r3, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r4, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000000000000000000000000ef0b2ef4e65656"], 0x10, 0x24000880}], 0x2, 0x0) bind$nfc_llcp(r1, &(0x7f0000000140)={0x27, r4, 0xffffffffffffffff, 0x6, 0x7, 0x0, "9b3e69d7c81107d8e721a7316627e9f63f2f1fc983a83ad8dfc54a77e478ac37e4d96b7170701ddef27318d1233e846e565599c2a11fde611306c075519989", 0x2e}, 0x60) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000240)={0x400, 0x0, 0xffff}) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000280), &(0x7f0000000040)=0x4) 07:59:48 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket(0x3, 0xa, 0x57) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x16f000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, r1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r3, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:49 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4004, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id, r1}, 0x20) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000002840)={0x27, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:49 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair(0x15, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f00000002c0)=""/61, 0x3d) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000000000000000000000000ef0b2ef4e65656"], 0x10, 0x24000880}], 0x2, 0x0) bind$nfc_llcp(r1, &(0x7f0000000140)={0x27, r3, 0xffffffffffffffff, 0x6, 0x7, 0x0, "9b3e69d7c81107d8e721a7316627e9f63f2f1fc983a83ad8dfc54a77e478ac37e4d96b7170701ddef27318d1233e846e565599c2a11fde611306c075519989", 0x2e}, 0x60) 07:59:49 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$isdn(0x22, 0x3, 0x26) 07:59:49 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xeb8, 0x200000) 07:59:49 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4004, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id, r1}, 0x20) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000002840)={0x27, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:49 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair(0x15, 0x5, 0x0, &(0x7f0000000200)) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000200)) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f00000002c0)=""/61, 0x3d) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r1, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r2, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000000000000000000000000ef0b2ef4e65656"], 0x10, 0x24000880}], 0x2, 0x0) 07:59:49 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket(0x3, 0xa, 0x57) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x16f000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, r1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r3, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:49 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4004, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id, r1}, 0x20) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 07:59:49 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) socket$isdn(0x22, 0x3, 0x26) 07:59:49 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x44, 0x0, 0x0, 0x0, 0x1}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r2, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:49 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4004, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id, r1}, 0x20) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 07:59:49 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair(0x15, 0x5, 0x0, &(0x7f0000000200)) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000200)) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f00000002c0)=""/61, 0x3d) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000001600)) 07:59:49 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4004, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id, r1}, 0x20) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) 07:59:49 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4004, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id, r1}, 0x20) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) 07:59:49 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket(0x3, 0xa, 0x57) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x16f000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, r1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r3, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 07:59:49 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4004, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id, r1}, 0x20) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) 07:59:49 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket$isdn(0x22, 0x3, 0x26) 07:59:49 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair(0x15, 0x5, 0x0, &(0x7f0000000200)) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000200)) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f00000002c0)=""/61, 0x3d) 07:59:49 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4004, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id, r1}, 0x20) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) 07:59:49 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x44, 0x0, 0x0, 0x0, 0x1}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r2, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:49 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket(0x3, 0xa, 0x57) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x16f000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, r1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r3, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) 07:59:49 executing program 4: socket$isdn(0x22, 0x3, 0x26) 07:59:49 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4004, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id, r1}, 0x20) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 07:59:49 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair(0x15, 0x5, 0x0, &(0x7f0000000200)) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f00000002c0)=""/61, 0x3d) 07:59:50 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4004, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id, r1}, 0x20) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 07:59:50 executing program 4: socket$isdn(0x22, 0x3, 0x0) 07:59:50 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x44, 0x0, 0x0, 0x0, 0x1}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r2, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:50 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair(0x15, 0x5, 0x0, &(0x7f0000000200)) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f00000002c0)=""/61, 0x3d) 07:59:50 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4004, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id, r1}, 0x20) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 07:59:50 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4004, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id, r1}, 0x20) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 07:59:50 executing program 4: socket$isdn(0x22, 0x3, 0x0) 07:59:50 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket(0x3, 0xa, 0x57) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x16f000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, r1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r3, 0x8002af76, 0x0) 07:59:50 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x44, 0x0, 0x0, 0x0, 0x1}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 07:59:50 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f00000002c0)=""/61, 0x3d) 07:59:50 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4004, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id, r1}, 0x20) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) 07:59:50 executing program 4: socket$isdn(0x22, 0x3, 0x0) 07:59:50 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4004, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id, r1}, 0x20) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) 07:59:50 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x44, 0x0, 0x0, 0x0, 0x1}) 07:59:50 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket(0x3, 0xa, 0x57) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x16f000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, r1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 07:59:50 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4004, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id, r1}, 0x20) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) 07:59:50 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000002c0)=""/61, 0x3d) 07:59:50 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4004, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id, r1}, 0x20) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) 07:59:50 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4004, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id, r1}, 0x20) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) 07:59:50 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:50 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4004, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id, r1}, 0x20) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) 07:59:50 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4004, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id, r1}, 0x20) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) 07:59:50 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000002c0)=""/61, 0x3d) 07:59:50 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4004, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id, r1}, 0x20) 07:59:50 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket(0x3, 0xa, 0x57) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x16f000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, r1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 07:59:50 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4004, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id, r1}, 0x20) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) 07:59:50 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4004, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0]}, 0x40) 07:59:50 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4004, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id, r1}, 0x20) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) 07:59:50 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:50 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4004, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id, r1}, 0x20) 07:59:50 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000002c0)=""/61, 0x3d) 07:59:51 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket(0x3, 0xa, 0x57) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x16f000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, r1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 07:59:51 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0]}, 0x40) 07:59:51 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4004, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id, r1}, 0x20) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) 07:59:51 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:51 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f00000002c0)=""/61, 0x3d) 07:59:51 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4004, 0x1}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id}, 0x20) 07:59:51 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket(0x3, 0xa, 0x57) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x16f000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, r1}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 07:59:51 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4004, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id, r1}, 0x20) 07:59:51 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id}, 0x20) 07:59:51 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0]}, 0x40) 07:59:51 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f00000002c0)=""/61, 0x3d) 07:59:51 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:51 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4004, 0x1}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id}, 0x20) 07:59:51 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket(0x3, 0xa, 0x57) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x16f000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, r1}) 07:59:51 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0]}, 0x40) 07:59:51 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x28, 0x13, 0xffffffffffffffff, @link_id}, 0x20) 07:59:51 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f00000002c0)=""/61, 0x3d) 07:59:51 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket(0x3, 0xa, 0x57) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x16f000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r0}) 07:59:51 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id}, 0x20) 07:59:51 executing program 5: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x28, 0x13, 0xffffffffffffffff, @link_id}, 0x20) 07:59:51 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:51 executing program 2: bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 07:59:51 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f00000002c0)=""/61, 0x3d) 07:59:51 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket(0x3, 0xa, 0x57) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x16f000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r0 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000280)) 07:59:51 executing program 5: bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 07:59:51 executing program 2: bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 07:59:51 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x28, 0x13, 0xffffffffffffffff, @link_id}, 0x20) 07:59:51 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f00000002c0)=""/61, 0x3d) 07:59:52 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:52 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket(0x3, 0xa, 0x57) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x16f000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) 07:59:52 executing program 2: bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 07:59:52 executing program 5: bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 07:59:52 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f00000002c0)=""/61, 0x3d) 07:59:52 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x28, 0x13, 0xffffffffffffffff, @link_id}, 0x20) 07:59:52 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket(0x3, 0xa, 0x57) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x16f000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) 07:59:52 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map, 0x0, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0]}, 0x40) 07:59:52 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:52 executing program 4: bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 07:59:52 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f00000002c0)=""/61, 0x3d) 07:59:52 executing program 5: bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 07:59:52 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket(0x3, 0xa, 0x57) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x16f000, 0x0) 07:59:52 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map, 0x0, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0]}, 0x40) 07:59:52 executing program 4: bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 07:59:52 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f00000002c0)=""/61, 0x3d) 07:59:52 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:52 executing program 5: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x0, 0x13, 0xffffffffffffffff, @link_id}, 0x20) 07:59:52 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket(0x3, 0xa, 0x57) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) 07:59:52 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map, 0x0, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0]}, 0x40) 07:59:52 executing program 4: bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 07:59:52 executing program 5: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x0, 0x13, 0xffffffffffffffff, @link_id}, 0x20) 07:59:52 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:52 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f00000002c0)=""/61, 0x3d) 07:59:52 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket(0x3, 0xa, 0x57) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) 07:59:52 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map, 0x13, 0x0, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0]}, 0x40) 07:59:52 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x0, 0x13, 0xffffffffffffffff, @link_id}, 0x20) 07:59:52 executing program 5: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x0, 0x13, 0xffffffffffffffff, @link_id}, 0x20) 07:59:52 executing program 0: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:52 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map, 0x13, 0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0]}, 0x40) 07:59:52 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket(0x3, 0xa, 0x57) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 07:59:52 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f00000002c0)=""/61, 0x3d) 07:59:53 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x0, 0x13, 0xffffffffffffffff, @link_id}, 0x20) 07:59:53 executing program 5: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x28, 0x0, 0xffffffffffffffff, @link_id}, 0x20) 07:59:53 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket(0x3, 0xa, 0x57) 07:59:53 executing program 0: syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:53 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0]}, 0x40) 07:59:53 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f00000002c0)=""/61, 0x3d) 07:59:53 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x0, 0x13, 0xffffffffffffffff, @link_id}, 0x20) 07:59:53 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:53 executing program 0: syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:53 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x28, 0x0, 0xffffffffffffffff, @link_id}, 0x20) 07:59:53 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0]}, 0x40) 07:59:53 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000002c0)=""/61, 0x3d) 07:59:53 executing program 3: socket(0x3, 0xa, 0x57) 07:59:53 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:53 executing program 0: syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:53 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f00000002c0)=""/61, 0x3d) 07:59:53 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000002c0)=""/61, 0x3d) 07:59:53 executing program 3: socket(0x0, 0xa, 0x57) 07:59:53 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0]}, 0x40) 07:59:53 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:53 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000002c0)=""/61, 0x3d) 07:59:53 executing program 0: syz_io_uring_setup(0x4ec8, 0x0, &(0x7f0000000240), &(0x7f0000000280)) 07:59:53 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4004, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x13, 0x1, 0x2cb, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r0, 0x28, 0x13, r0, @link_id, r1}, 0x20) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 07:59:53 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 07:59:53 executing program 3: socket(0x0, 0xa, 0x57) 07:59:53 executing program 5: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:53 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0x0, &(0x7f00000002c0)=""/61, 0x3d) 07:59:53 executing program 0: syz_io_uring_setup(0x4ec8, 0x0, &(0x7f0000000240), &(0x7f0000000280)) 07:59:54 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x44, 0x0, 0x0, 0x0, 0x1}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r2, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:54 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0x0, &(0x7f00000002c0)=""/61, 0x3d) 07:59:54 executing program 5: syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:54 executing program 4: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:54 executing program 3: socket(0x0, 0xa, 0x57) 07:59:54 executing program 0: syz_io_uring_setup(0x4ec8, 0x0, &(0x7f0000000240), &(0x7f0000000280)) 07:59:54 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x44, 0x0, 0x0, 0x0, 0x1}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r2, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:54 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0x0, 0x0, 0x0) 07:59:54 executing program 5: syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:54 executing program 0: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:54 executing program 4: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:54 executing program 3: socket(0x3, 0x0, 0x57) 07:59:54 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x44, 0x0, 0x0, 0x0, 0x1}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r2, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:54 executing program 5: syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:54 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000340)={r5}) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r6, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053", 0x3e}, 0x60) 07:59:54 executing program 0: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:54 executing program 4: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:54 executing program 3: socket(0x3, 0x0, 0x0) 07:59:54 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x44, 0x0, 0x0, 0x0, 0x1}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 07:59:54 executing program 5: syz_io_uring_setup(0x4ec8, 0x0, &(0x7f0000000240), &(0x7f0000000280)) 07:59:54 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000340)={r5}) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r6, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053", 0x3e}, 0x60) 07:59:54 executing program 0: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:54 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:54 executing program 4: syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:55 executing program 5: syz_io_uring_setup(0x4ec8, 0x0, &(0x7f0000000240), &(0x7f0000000280)) 07:59:55 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x44, 0x0, 0x0, 0x0, 0x1}) 07:59:55 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000340)={r5}) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r6, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053", 0x3e}, 0x60) 07:59:55 executing program 0: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:55 executing program 4: syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:55 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x40a100) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000040)={0x6}) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffb1, &(0x7f00000001c0), 0x0, 0x0, 0x8, &(0x7f0000000200)=[{}, {}], 0x0, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r7 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r7, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r6}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000740)={r5, r6, r8, 0x0, 0x12fa458e, 0xc71, 0x401, 0x0, 0x80000001, 0x35, 0x7, 0x10001}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r4, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) r9 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, 0x0) r10 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x17, &(0x7f0000000e80)=ANY=[@ANYBLOB="1801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007fffffff850000000600000018110000a7e82a1f9ea416ac7c1561b9b3d3b536a1c15667e441e9894ebdaef1717c9a43503c631a43b48f40f845c57525a2c93478c3fea68f1fc9bf497f4feefd5fedf4c9227d774001c34e736e2c805b60b6beed9d4267b0da5893c28ceb463c2fbb6e5cd53f4e25cf6835b3e410c76023c423b314fdb470ab1490e6fa8bf163c532c75a858aa1a7235e95e6f344a1fa51a7f0df4ae000000000", @ANYBLOB="e871e02b9af0d02b656f078d84ad36b26be7629dceec2305fd608a85ea09762183749b5921c3e9bb6ddbc8a71aaed70fba7f47ccafa156bf0181db9e379ae027d56913fb6c44902e14e0894262e15a63d86960ac32524c708d7c52d1164417542820233649f8523c24770184aaca4ed22910c8e7beda51fc66273f6913f7316eea2d7096377f2cb2704b97a73559c13b1984ff2c5af93a69ca6098f5a394d54f628fc1ee675cbbd62138d4a0e7c70d5cbe6fa90826108acde08772152b185258aabd2c3b16717172ff13609194a6516fd0d34a62fa5245ae1d6a2abef7f5b8f038719bce8288219c1b2a5ac6ba9fcba82e9a01cba202bd02ba6c9c9149c928d712498d111b083317bf6c0a12df4792b0f5d349d1bbae37070bdf3332e5b1a14c1c30f5bdbc748854893d0090b65647d278a45fd576dc92adf206c1e40982f8fac57d56e5df52eea14124f3e1dcb19fa771b1b76b1927dd704a7a490d533be5b0b513df3e9fb9e1036f494f3867b61d111d25", @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000001834000001000000000000000000000059243000ffffffff18400400070000000000000000000000cc491000fcffffff"], &(0x7f0000000240)='syzkaller\x00', 0x7fff, 0x28, &(0x7f00000008c0)=""/40, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x8, 0x4723dc02, 0x100}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000340)=[r0, r1, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000380)=[{0x3, 0x2, 0x9, 0xa}, {0x2, 0x4, 0x1, 0x3}, {0x2, 0x2, 0xf, 0x7}, {0x4, 0x1, 0xe}, {0x5, 0x4, 0x6, 0x7}, {0x0, 0x4, 0xa, 0x9}, {0x3, 0x4, 0xc}], 0x10, 0xff}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@ifindex=r4, r9, 0x5, 0x12, r10, @prog_fd=r11}, 0x20) 07:59:55 executing program 5: syz_io_uring_setup(0x4ec8, 0x0, &(0x7f0000000240), &(0x7f0000000280)) 07:59:55 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:55 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000340)={r5}) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 07:59:55 executing program 0: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0, 0x0, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:55 executing program 4: syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:55 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x44, 0x0, 0x0, 0x0, 0x1}) 07:59:55 executing program 5: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:55 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000340)={r5}) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) 07:59:55 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 07:59:55 executing program 0: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:55 executing program 4: syz_io_uring_setup(0x4ec8, 0x0, &(0x7f0000000240), &(0x7f0000000280)) 07:59:55 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x44, 0x0, 0x0, 0x0, 0x1}) 07:59:55 executing program 5: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:55 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 07:59:55 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000340)={r5}) 07:59:55 executing program 4: syz_io_uring_setup(0x4ec8, 0x0, &(0x7f0000000240), &(0x7f0000000280)) 07:59:55 executing program 0: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, 0x0, &(0x7f0000000280)) 07:59:55 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 07:59:55 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x44, 0x0, 0x0, 0x0, 0x1}) 07:59:55 executing program 4: syz_io_uring_setup(0x4ec8, 0x0, &(0x7f0000000240), &(0x7f0000000280)) 07:59:55 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000340)) 07:59:56 executing program 5: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:56 executing program 0: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, 0x0, &(0x7f0000000280)) 07:59:56 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 07:59:56 executing program 4: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:56 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000340)) 07:59:56 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:56 executing program 5: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:56 executing program 0: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, 0x0, &(0x7f0000000280)) 07:59:56 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 07:59:56 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000340)) 07:59:56 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:56 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 07:59:56 executing program 5: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0, 0x0, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:56 executing program 4: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:56 executing program 0: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, &(0x7f0000000240), 0x0) 07:59:56 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000340)) 07:59:56 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:56 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 07:59:56 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000340)) 07:59:56 executing program 4: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:56 executing program 0: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, &(0x7f0000000240), 0x0) 07:59:56 executing program 5: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:56 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:56 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 07:59:56 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000340)) 07:59:57 executing program 0: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, &(0x7f0000000240), 0x0) 07:59:57 executing program 4: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:57 executing program 5: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, 0x0, &(0x7f0000000280)) 07:59:57 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:57 executing program 2: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 07:59:57 executing program 0: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:57 executing program 4: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0, 0x0, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:57 executing program 5: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, 0x0, &(0x7f0000000280)) 07:59:57 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000340)) 07:59:57 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:57 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 07:59:57 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000340)) 07:59:57 executing program 4: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:57 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:57 executing program 5: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, 0x0, &(0x7f0000000280)) 07:59:57 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:57 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 07:59:57 executing program 0: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:57 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000340)) 07:59:57 executing program 4: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, 0x0, &(0x7f0000000280)) 07:59:57 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:57 executing program 5: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, &(0x7f0000000240), 0x0) 07:59:57 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 07:59:57 executing program 0: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, 0x0, &(0x7f0000000280)) 07:59:57 executing program 4: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, 0x0, &(0x7f0000000280)) 07:59:57 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000340)) 07:59:58 executing program 2: syz_io_uring_setup(0x5cab, 0x0, &(0x7f0000000140), &(0x7f0000000180)) 07:59:58 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x44, 0x0, 0x0, 0x0, 0x1}) 07:59:58 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:58 executing program 5: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, &(0x7f0000000240), 0x0) 07:59:58 executing program 2: syz_io_uring_setup(0x5cab, 0x0, &(0x7f0000000140), &(0x7f0000000180)) 07:59:58 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000340)) 07:59:58 executing program 4: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, 0x0, &(0x7f0000000280)) 07:59:58 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:58 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x44, 0x0, 0x0, 0x0, 0x1}) 07:59:58 executing program 5: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, &(0x7f0000000240), 0x0) 07:59:58 executing program 4: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, &(0x7f0000000240), 0x0) 07:59:58 executing program 2: syz_io_uring_setup(0x5cab, 0x0, &(0x7f0000000140), &(0x7f0000000180)) 07:59:58 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000340)) 07:59:58 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:58 executing program 2: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 07:59:58 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x44, 0x0, 0x0, 0x0, 0x1}) 07:59:58 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="000018000000000000000000000000f2"], 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053", 0x3e}, 0x60) 07:59:58 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000340)) 07:59:58 executing program 4: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, &(0x7f0000000240), 0x0) 07:59:58 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:58 executing program 2: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 07:59:58 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x40a100) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000040)={0x6}) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffb1, &(0x7f00000001c0), 0x0, 0x0, 0x8, &(0x7f0000000200)=[{}, {}], 0x0, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r7 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r7, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r6}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000740)={r5, r6, r8, 0x0, 0x12fa458e, 0xc71, 0x401, 0x0, 0x80000001, 0x35, 0x7, 0x10001}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r4, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) r9 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, 0x0) r10 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x17, &(0x7f0000000e80)=ANY=[@ANYBLOB="1801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007fffffff850000000600000018110000a7e82a1f9ea416ac7c1561b9b3d3b536a1c15667e441e9894ebdaef1717c9a43503c631a43b48f40f845c57525a2c93478c3fea68f1fc9bf497f4feefd5fedf4c9227d774001c34e736e2c805b60b6beed9d4267b0da5893c28ceb463c2fbb6e5cd53f4e25cf6835b3e410c76023c423b314fdb470ab1490e6fa8bf163c532c75a858aa1a7235e95e6f344a1fa51a7f0df4ae000000000", @ANYBLOB="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", @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000001834000001000000000000000000000059243000ffffffff18400400070000000000000000000000cc491000fcffffff"], &(0x7f0000000240)='syzkaller\x00', 0x7fff, 0x28, &(0x7f00000008c0)=""/40, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x8, 0x4723dc02, 0x100}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000340)=[r0, r1, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000380)=[{0x3, 0x2, 0x9, 0xa}, {0x2, 0x4, 0x1, 0x3}, {0x2, 0x2, 0xf, 0x7}, {0x4, 0x1, 0xe}, {0x5, 0x4, 0x6, 0x7}, {0x0, 0x4, 0xa, 0x9}, {0x3, 0x4, 0xc}], 0x10, 0xff}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@ifindex=r4, r9, 0x5, 0x12, r10, @prog_fd=r11, r12}, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 07:59:58 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:58 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000340)) 07:59:58 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xac5, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:58 executing program 2: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 07:59:58 executing program 4: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, &(0x7f0000000240), 0x0) 07:59:59 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000340)) 07:59:59 executing program 5: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, &(0x7f0000000240), 0x0) 07:59:59 executing program 3: syz_io_uring_setup(0x4ec8, 0x0, &(0x7f0000000240), &(0x7f0000000280)) 07:59:59 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 07:59:59 executing program 2: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 07:59:59 executing program 4: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 07:59:59 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000340)) 07:59:59 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000340)) 07:59:59 executing program 3: syz_io_uring_setup(0x4ec8, 0x0, &(0x7f0000000240), &(0x7f0000000280)) 07:59:59 executing program 2: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 07:59:59 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) 07:59:59 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000240), 0xeb8, 0x200000) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000280)={0x10001, 0x0, 0x10000}) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) 07:59:59 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 07:59:59 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x1000000, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x1, 0x1, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000940)={r3, r4, 0x15, 0x9bdb, 0x6}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r5, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r7, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="3f9c0c8c035133a223470000"], 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r8 = accept$nfc_llcp(r5, 0x0, &(0x7f0000000240)) bind$nfc_llcp(r8, &(0x7f0000000280)={0x27, r6, 0x1, 0x2, 0x7, 0x2, "1976ba1343a5518f319203851c5cd604ea073bc90e0e71f5a3f9d69c22b0ab27b1eaecc6f26de2079dbca135b442d7b3c87f7f21742e1ebdad9e28cd4ea21a", 0x3}, 0x60) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000980)=@IORING_OP_POLL_REMOVE={0x7, 0x58, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, 0x0) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r9, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r10, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053", 0x3e}, 0x60) 07:59:59 executing program 3: syz_io_uring_setup(0x4ec8, 0x0, &(0x7f0000000240), &(0x7f0000000280)) 07:59:59 executing program 2: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000000140), &(0x7f0000000180)) 07:59:59 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) 07:59:59 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r0, 0x8004af70, &(0x7f0000000040)) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f0000000080)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f00000000c0)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000700), &(0x7f0000000780)=0x60, 0x0) 07:59:59 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 07:59:59 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x1000000, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x1, 0x1, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000940)={r3, r4, 0x15, 0x9bdb, 0x6}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r5, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r7, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="3f9c0c8c035133a223470000"], 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r8 = accept$nfc_llcp(r5, 0x0, &(0x7f0000000240)) bind$nfc_llcp(r8, &(0x7f0000000280)={0x27, r6, 0x1, 0x2, 0x7, 0x2, "1976ba1343a5518f319203851c5cd604ea073bc90e0e71f5a3f9d69c22b0ab27b1eaecc6f26de2079dbca135b442d7b3c87f7f21742e1ebdad9e28cd4ea21a", 0x3}, 0x60) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000980)=@IORING_OP_POLL_REMOVE={0x7, 0x58, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, 0x0) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r9, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r10, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053", 0x3e}, 0x60) 07:59:59 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:59 executing program 2: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x0, &(0x7f0000000180)) 07:59:59 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) 07:59:59 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 07:59:59 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x40a100) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000040)={0x6}) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffb1, &(0x7f00000001c0), 0x0, 0x0, 0x8, &(0x7f0000000200)=[{}, {}], 0x0, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r7 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r7, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r6}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000740)={r5, r6, r8, 0x0, 0x12fa458e, 0xc71, 0x401, 0x0, 0x80000001, 0x35, 0x7, 0x10001}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r4, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) r9 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, 0x0) r10 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x17, &(0x7f0000000e80)=ANY=[@ANYBLOB="1801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007fffffff850000000600000018110000a7e82a1f9ea416ac7c1561b9b3d3b536a1c15667e441e9894ebdaef1717c9a43503c631a43b48f40f845c57525a2c93478c3fea68f1fc9bf497f4feefd5fedf4c9227d774001c34e736e2c805b60b6beed9d4267b0da5893c28ceb463c2fbb6e5cd53f4e25cf6835b3e410c76023c423b314fdb470ab1490e6fa8bf163c532c75a858aa1a7235e95e6f344a1fa51a7f0df4ae000000000", @ANYBLOB="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", @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000001834000001000000000000000000000059243000ffffffff18400400070000000000000000000000cc491000fcffffff"], &(0x7f0000000240)='syzkaller\x00', 0x7fff, 0x28, &(0x7f00000008c0)=""/40, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x8, 0x4723dc02, 0x100}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000340)=[r0, r1, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000380)=[{0x3, 0x2, 0x9, 0xa}, {0x2, 0x4, 0x1, 0x3}, {0x2, 0x2, 0xf, 0x7}, {0x4, 0x1, 0xe}, {0x5, 0x4, 0x6, 0x7}, {0x0, 0x4, 0xa, 0x9}, {0x3, 0x4, 0xc}], 0x10, 0xff}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@ifindex=r4, r9, 0x5, 0x12, r10, @prog_fd=r11, r12}, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0) r13 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r13, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 07:59:59 executing program 2: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x0, 0x0) 07:59:59 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 07:59:59 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x1000000, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x1, 0x1, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000940)={r3, r4, 0x15, 0x9bdb, 0x6}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r5, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r7, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="3f9c0c8c035133a223470000"], 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r8 = accept$nfc_llcp(r5, 0x0, &(0x7f0000000240)) bind$nfc_llcp(r8, &(0x7f0000000280)={0x27, r6, 0x1, 0x2, 0x7, 0x2, "1976ba1343a5518f319203851c5cd604ea073bc90e0e71f5a3f9d69c22b0ab27b1eaecc6f26de2079dbca135b442d7b3c87f7f21742e1ebdad9e28cd4ea21a", 0x3}, 0x60) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000980)=@IORING_OP_POLL_REMOVE={0x7, 0x58, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, 0x0) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r9, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r10, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053", 0x3e}, 0x60) 07:59:59 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 08:00:00 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x40a100) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000040)={0x6}) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffb1, &(0x7f00000001c0), 0x0, 0x0, 0x8, &(0x7f0000000200)=[{}, {}], 0x0, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r7 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r7, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r6}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000740)={r5, r6, r8, 0x0, 0x12fa458e, 0xc71, 0x401, 0x0, 0x80000001, 0x35, 0x7, 0x10001}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r4, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) r9 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, 0x0) r10 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x17, &(0x7f0000000e80)=ANY=[@ANYBLOB="1801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007fffffff850000000600000018110000a7e82a1f9ea416ac7c1561b9b3d3b536a1c15667e441e9894ebdaef1717c9a43503c631a43b48f40f845c57525a2c93478c3fea68f1fc9bf497f4feefd5fedf4c9227d774001c34e736e2c805b60b6beed9d4267b0da5893c28ceb463c2fbb6e5cd53f4e25cf6835b3e410c76023c423b314fdb470ab1490e6fa8bf163c532c75a858aa1a7235e95e6f344a1fa51a7f0df4ae000000000", @ANYBLOB="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", @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000001834000001000000000000000000000059243000ffffffff18400400070000000000000000000000cc491000fcffffff"], &(0x7f0000000240)='syzkaller\x00', 0x7fff, 0x28, &(0x7f00000008c0)=""/40, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x8, 0x4723dc02, 0x100}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000340)=[r0, r1, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000380)=[{0x3, 0x2, 0x9, 0xa}, {0x2, 0x4, 0x1, 0x3}, {0x2, 0x2, 0xf, 0x7}, {0x4, 0x1, 0xe}, {0x5, 0x4, 0x6, 0x7}, {0x0, 0x4, 0xa, 0x9}, {0x3, 0x4, 0xc}], 0x10, 0xff}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@ifindex=r4, r9, 0x5, 0x12, r10, @prog_fd=r11, r12}, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0) r13 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r13, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 08:00:00 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) 08:00:00 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) accept4(r2, &(0x7f0000000240)=@nfc_llcp, &(0x7f00000002c0)=0x80, 0x800) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f00000014c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001480)={&(0x7f00000016c0)={0x1d0, 0x12, 0x300, 0x70bd2a, 0x25dfdbfb, {0x0, 0x20, 0xff, 0x3, {0x4e23, 0x4e23, [0x1, 0x5, 0x9, 0x9], [0x8001, 0x2a38ffcf, 0x3, 0xfffffff8], r0, [0xe187, 0xffffffff]}, 0x800, 0xfffffff9}, [@INET_DIAG_REQ_BYTECODE={0xfd, 0x1, "4b95c1fde64b32bc5184808f1f8c58c2f6fe18d84cfe3d5be51121b27502aa2e03688751cf54d5d523d56d2c083c49f175983033fac5a4baf3dcf67199939b5509f9aa1329768e88c60de31b6c586075d1a958211136fa3e53ba5234d169a5cfc07d141bd4e4aff74efecff8f33189a431c0edccd6dce8c2215a70e720931b72e7d531c6ffc65e3f2f73edb8b225c533ba5cfe62f8ee86728dcfbcece0ce3b5a1703c2c8b8a3cf87c40ea727794b181a7fe7e8df189f9676745a5c0f5ebaca921f26bd0558debaf791d9e6e7eb51a4f69d66fc8902c7d686caed08c02bbc62c90eabd7299c262afeb21e744b02b79dde29d58ff2b0bbd540ef"}, @INET_DIAG_REQ_BYTECODE={0x81, 0x1, "7010290e80c5a3f7517285325d27d37df3f1db031f7f1c513c631db7d2544078fe974d08f980689812ac32d25cd1c4e5331393beb385a09d16a5fce079e5c1a7017eb45ba51193b59e0f8adf49fbf8214c46a0d65602f8f15333385ff2c9b23720a5d4512a90f2bd082a063c025072ce9f0176170fc231876f056ddb60"}]}, 0x1d0}}, 0x404c042) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, r2, 0x0, &(0x7f0000001500)='./file0\x00', 0x12, 0x0, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r5, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053", 0x3e}, 0x60) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x8, [@int={0x2, 0x0, 0x0, 0x1, 0x0, 0x17, 0x0, 0x3d, 0x5}, @struct={0xd, 0x1, 0x0, 0x4, 0x0, 0x2, [{0x4, 0x1, 0x6}]}]}, {0x0, [0x5f, 0x30, 0x61, 0x30, 0x0, 0x30]}}, &(0x7f0000000380)=""/4096, 0x48, 0x1000, 0x0, 0xffff45cf}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=@base={0x14, 0x8, 0x200, 0xfffffffd, 0x100, 0x1, 0x3, '\x00', r0, r6, 0x2, 0x3, 0x5}, 0x48) 08:00:00 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 08:00:00 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:00 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x1000000, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x1, 0x1, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000940)={r3, r4, 0x15, 0x9bdb, 0x6}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r5, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r7, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="3f9c0c8c035133a223470000"], 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r8 = accept$nfc_llcp(r5, 0x0, &(0x7f0000000240)) bind$nfc_llcp(r8, &(0x7f0000000280)={0x27, r6, 0x1, 0x2, 0x7, 0x2, "1976ba1343a5518f319203851c5cd604ea073bc90e0e71f5a3f9d69c22b0ab27b1eaecc6f26de2079dbca135b442d7b3c87f7f21742e1ebdad9e28cd4ea21a", 0x3}, 0x60) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000980)=@IORING_OP_POLL_REMOVE={0x7, 0x58, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, 0x0) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r9, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 08:00:00 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x40a100) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000040)={0x6}) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffb1, &(0x7f00000001c0), 0x0, 0x0, 0x8, &(0x7f0000000200)=[{}, {}], 0x0, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r7 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r7, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r6}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000740)={r5, r6, r8, 0x0, 0x12fa458e, 0xc71, 0x401, 0x0, 0x80000001, 0x35, 0x7, 0x10001}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r4, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) r9 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, 0x0) r10 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x17, &(0x7f0000000e80)=ANY=[@ANYBLOB="1801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007fffffff850000000600000018110000a7e82a1f9ea416ac7c1561b9b3d3b536a1c15667e441e9894ebdaef1717c9a43503c631a43b48f40f845c57525a2c93478c3fea68f1fc9bf497f4feefd5fedf4c9227d774001c34e736e2c805b60b6beed9d4267b0da5893c28ceb463c2fbb6e5cd53f4e25cf6835b3e410c76023c423b314fdb470ab1490e6fa8bf163c532c75a858aa1a7235e95e6f344a1fa51a7f0df4ae000000000", @ANYBLOB="e871e02b9af0d02b656f078d84ad36b26be7629dceec2305fd608a85ea09762183749b5921c3e9bb6ddbc8a71aaed70fba7f47ccafa156bf0181db9e379ae027d56913fb6c44902e14e0894262e15a63d86960ac32524c708d7c52d1164417542820233649f8523c24770184aaca4ed22910c8e7beda51fc66273f6913f7316eea2d7096377f2cb2704b97a73559c13b1984ff2c5af93a69ca6098f5a394d54f628fc1ee675cbbd62138d4a0e7c70d5cbe6fa90826108acde08772152b185258aabd2c3b16717172ff13609194a6516fd0d34a62fa5245ae1d6a2abef7f5b8f038719bce8288219c1b2a5ac6ba9fcba82e9a01cba202bd02ba6c9c9149c928d712498d111b083317bf6c0a12df4792b0f5d349d1bbae37070bdf3332e5b1a14c1c30f5bdbc748854893d0090b65647d278a45fd576dc92adf206c1e40982f8fac57d56e5df52eea14124f3e1dcb19fa771b1b76b1927dd704a7a490d533be5b0b513df3e9fb9e1036f494f3867b61d111d25", @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000001834000001000000000000000000000059243000ffffffff18400400070000000000000000000000cc491000fcffffff"], &(0x7f0000000240)='syzkaller\x00', 0x7fff, 0x28, &(0x7f00000008c0)=""/40, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x8, 0x4723dc02, 0x100}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000340)=[r0, r1, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000380)=[{0x3, 0x2, 0x9, 0xa}, {0x2, 0x4, 0x1, 0x3}, {0x2, 0x2, 0xf, 0x7}, {0x4, 0x1, 0xe}, {0x5, 0x4, 0x6, 0x7}, {0x0, 0x4, 0xa, 0x9}, {0x3, 0x4, 0xc}], 0x10, 0xff}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@ifindex=r4, r9, 0x5, 0x12, r10, @prog_fd=r11, r12}, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0) r13 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r13, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 08:00:00 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) 08:00:00 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 08:00:00 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:00 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x1000000, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x1, 0x1, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000940)={r3, r4, 0x15, 0x9bdb, 0x6}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r5, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r7, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="3f9c0c8c035133a223470000"], 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r8 = accept$nfc_llcp(r5, 0x0, &(0x7f0000000240)) bind$nfc_llcp(r8, &(0x7f0000000280)={0x27, r6, 0x1, 0x2, 0x7, 0x2, "1976ba1343a5518f319203851c5cd604ea073bc90e0e71f5a3f9d69c22b0ab27b1eaecc6f26de2079dbca135b442d7b3c87f7f21742e1ebdad9e28cd4ea21a", 0x3}, 0x60) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000980)=@IORING_OP_POLL_REMOVE={0x7, 0x58, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, 0x0) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r9, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) 08:00:00 executing program 2: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:00 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) 08:00:00 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 08:00:00 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x40a100) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000040)={0x6}) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffb1, &(0x7f00000001c0), 0x0, 0x0, 0x8, &(0x7f0000000200)=[{}, {}], 0x0, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r7 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r7, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r6}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000740)={r5, r6, r8, 0x0, 0x12fa458e, 0xc71, 0x401, 0x0, 0x80000001, 0x35, 0x7, 0x10001}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r4, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) r9 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, 0x0) r10 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x17, &(0x7f0000000e80)=ANY=[@ANYBLOB="1801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007fffffff850000000600000018110000a7e82a1f9ea416ac7c1561b9b3d3b536a1c15667e441e9894ebdaef1717c9a43503c631a43b48f40f845c57525a2c93478c3fea68f1fc9bf497f4feefd5fedf4c9227d774001c34e736e2c805b60b6beed9d4267b0da5893c28ceb463c2fbb6e5cd53f4e25cf6835b3e410c76023c423b314fdb470ab1490e6fa8bf163c532c75a858aa1a7235e95e6f344a1fa51a7f0df4ae000000000", @ANYBLOB="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", @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000001834000001000000000000000000000059243000ffffffff18400400070000000000000000000000cc491000fcffffff"], &(0x7f0000000240)='syzkaller\x00', 0x7fff, 0x28, &(0x7f00000008c0)=""/40, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x8, 0x4723dc02, 0x100}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000340)=[r0, r1, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000380)=[{0x3, 0x2, 0x9, 0xa}, {0x2, 0x4, 0x1, 0x3}, {0x2, 0x2, 0xf, 0x7}, {0x4, 0x1, 0xe}, {0x5, 0x4, 0x6, 0x7}, {0x0, 0x4, 0xa, 0x9}, {0x3, 0x4, 0xc}], 0x10, 0xff}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@ifindex=r4, r9, 0x5, 0x12, r10, @prog_fd=r11, r12}, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 08:00:00 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0, 0x0, 0x12c}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:00 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x1000000, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x1, 0x1, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000940)={r3, r4, 0x15, 0x9bdb, 0x6}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r5, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r7, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="3f9c0c8c035133a223470000"], 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r8 = accept$nfc_llcp(r5, 0x0, &(0x7f0000000240)) bind$nfc_llcp(r8, &(0x7f0000000280)={0x27, r6, 0x1, 0x2, 0x7, 0x2, "1976ba1343a5518f319203851c5cd604ea073bc90e0e71f5a3f9d69c22b0ab27b1eaecc6f26de2079dbca135b442d7b3c87f7f21742e1ebdad9e28cd4ea21a", 0x3}, 0x60) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000980)=@IORING_OP_POLL_REMOVE={0x7, 0x58, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, 0x0) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r9, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) 08:00:00 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 08:00:00 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 08:00:00 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000340)) 08:00:00 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x1000000, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x1, 0x1, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000940)={r3, r4, 0x15, 0x9bdb, 0x6}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r5, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r7, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="3f9c0c8c035133a223470000"], 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r8 = accept$nfc_llcp(r5, 0x0, &(0x7f0000000240)) bind$nfc_llcp(r8, &(0x7f0000000280)={0x27, r6, 0x1, 0x2, 0x7, 0x2, "1976ba1343a5518f319203851c5cd604ea073bc90e0e71f5a3f9d69c22b0ab27b1eaecc6f26de2079dbca135b442d7b3c87f7f21742e1ebdad9e28cd4ea21a", 0x3}, 0x60) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000980)=@IORING_OP_POLL_REMOVE={0x7, 0x58, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) 08:00:00 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x40a100) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000040)={0x6}) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffb1, &(0x7f00000001c0), 0x0, 0x0, 0x8, &(0x7f0000000200)=[{}, {}], 0x0, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r7 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r7, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r6}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000740)={r5, r6, r8, 0x0, 0x12fa458e, 0xc71, 0x401, 0x0, 0x80000001, 0x35, 0x7, 0x10001}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r4, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) r9 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, 0x0) r10 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x17, &(0x7f0000000e80)=ANY=[@ANYBLOB="1801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007fffffff850000000600000018110000a7e82a1f9ea416ac7c1561b9b3d3b536a1c15667e441e9894ebdaef1717c9a43503c631a43b48f40f845c57525a2c93478c3fea68f1fc9bf497f4feefd5fedf4c9227d774001c34e736e2c805b60b6beed9d4267b0da5893c28ceb463c2fbb6e5cd53f4e25cf6835b3e410c76023c423b314fdb470ab1490e6fa8bf163c532c75a858aa1a7235e95e6f344a1fa51a7f0df4ae000000000", @ANYBLOB="e871e02b9af0d02b656f078d84ad36b26be7629dceec2305fd608a85ea09762183749b5921c3e9bb6ddbc8a71aaed70fba7f47ccafa156bf0181db9e379ae027d56913fb6c44902e14e0894262e15a63d86960ac32524c708d7c52d1164417542820233649f8523c24770184aaca4ed22910c8e7beda51fc66273f6913f7316eea2d7096377f2cb2704b97a73559c13b1984ff2c5af93a69ca6098f5a394d54f628fc1ee675cbbd62138d4a0e7c70d5cbe6fa90826108acde08772152b185258aabd2c3b16717172ff13609194a6516fd0d34a62fa5245ae1d6a2abef7f5b8f038719bce8288219c1b2a5ac6ba9fcba82e9a01cba202bd02ba6c9c9149c928d712498d111b083317bf6c0a12df4792b0f5d349d1bbae37070bdf3332e5b1a14c1c30f5bdbc748854893d0090b65647d278a45fd576dc92adf206c1e40982f8fac57d56e5df52eea14124f3e1dcb19fa771b1b76b1927dd704a7a490d533be5b0b513df3e9fb9e1036f494f3867b61d111d25", @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000001834000001000000000000000000000059243000ffffffff18400400070000000000000000000000cc491000fcffffff"], &(0x7f0000000240)='syzkaller\x00', 0x7fff, 0x28, &(0x7f00000008c0)=""/40, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x8, 0x4723dc02, 0x100}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000340)=[r0, r1, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000380)=[{0x3, 0x2, 0x9, 0xa}, {0x2, 0x4, 0x1, 0x3}, {0x2, 0x2, 0xf, 0x7}, {0x4, 0x1, 0xe}, {0x5, 0x4, 0x6, 0x7}, {0x0, 0x4, 0xa, 0x9}, {0x3, 0x4, 0xc}], 0x10, 0xff}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@ifindex=r4, r9, 0x5, 0x12, r10, @prog_fd=r11, r12}, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0) 08:00:00 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:00 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000140)={0x3}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @multicast1, 0x0}, &(0x7f0000000040)=0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x5}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r3, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r4, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) connect$nfc_llcp(r2, &(0x7f0000000180)={0x27, r4, 0xffffffffffffffff, 0x7, 0x4, 0x88, "8cd8a51326301da051af6e88823bbd2d5cd5d6cc4f9637adcb0f5aaf5e5e44b99e59c8167a9727c894c83ce8f2a68ae4b2c77fb79360a593e3603e669ff446", 0x1d}, 0x60) connect$nfc_llcp(r2, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 08:00:00 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x1000000, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x1, 0x1, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000940)={r3, r4, 0x15, 0x9bdb, 0x6}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r5, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r7, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="3f9c0c8c035133a223470000"], 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r8 = accept$nfc_llcp(r5, 0x0, &(0x7f0000000240)) bind$nfc_llcp(r8, &(0x7f0000000280)={0x27, r6, 0x1, 0x2, 0x7, 0x2, "1976ba1343a5518f319203851c5cd604ea073bc90e0e71f5a3f9d69c22b0ab27b1eaecc6f26de2079dbca135b442d7b3c87f7f21742e1ebdad9e28cd4ea21a", 0x3}, 0x60) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000980)=@IORING_OP_POLL_REMOVE={0x7, 0x58, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) 08:00:00 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000340)) 08:00:01 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 08:00:01 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x40a100) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000040)={0x6}) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffb1, &(0x7f00000001c0), 0x0, 0x0, 0x8, &(0x7f0000000200)=[{}, {}], 0x0, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r7 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r7, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r6}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000740)={r5, r6, r8, 0x0, 0x12fa458e, 0xc71, 0x401, 0x0, 0x80000001, 0x35, 0x7, 0x10001}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r4, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) r9 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, 0x0) r10 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x17, &(0x7f0000000e80)=ANY=[@ANYBLOB="1801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007fffffff850000000600000018110000a7e82a1f9ea416ac7c1561b9b3d3b536a1c15667e441e9894ebdaef1717c9a43503c631a43b48f40f845c57525a2c93478c3fea68f1fc9bf497f4feefd5fedf4c9227d774001c34e736e2c805b60b6beed9d4267b0da5893c28ceb463c2fbb6e5cd53f4e25cf6835b3e410c76023c423b314fdb470ab1490e6fa8bf163c532c75a858aa1a7235e95e6f344a1fa51a7f0df4ae000000000", @ANYBLOB="e871e02b9af0d02b656f078d84ad36b26be7629dceec2305fd608a85ea09762183749b5921c3e9bb6ddbc8a71aaed70fba7f47ccafa156bf0181db9e379ae027d56913fb6c44902e14e0894262e15a63d86960ac32524c708d7c52d1164417542820233649f8523c24770184aaca4ed22910c8e7beda51fc66273f6913f7316eea2d7096377f2cb2704b97a73559c13b1984ff2c5af93a69ca6098f5a394d54f628fc1ee675cbbd62138d4a0e7c70d5cbe6fa90826108acde08772152b185258aabd2c3b16717172ff13609194a6516fd0d34a62fa5245ae1d6a2abef7f5b8f038719bce8288219c1b2a5ac6ba9fcba82e9a01cba202bd02ba6c9c9149c928d712498d111b083317bf6c0a12df4792b0f5d349d1bbae37070bdf3332e5b1a14c1c30f5bdbc748854893d0090b65647d278a45fd576dc92adf206c1e40982f8fac57d56e5df52eea14124f3e1dcb19fa771b1b76b1927dd704a7a490d533be5b0b513df3e9fb9e1036f494f3867b61d111d25", @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000001834000001000000000000000000000059243000ffffffff18400400070000000000000000000000cc491000fcffffff"], &(0x7f0000000240)='syzkaller\x00', 0x7fff, 0x28, &(0x7f00000008c0)=""/40, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x8, 0x4723dc02, 0x100}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000340)=[r0, r1, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000380)=[{0x3, 0x2, 0x9, 0xa}, {0x2, 0x4, 0x1, 0x3}, {0x2, 0x2, 0xf, 0x7}, {0x4, 0x1, 0xe}, {0x5, 0x4, 0x6, 0x7}, {0x0, 0x4, 0xa, 0x9}, {0x3, 0x4, 0xc}], 0x10, 0xff}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@ifindex=r4, r9, 0x5, 0x12, r10, @prog_fd=r11, r12}, 0x20) 08:00:01 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, 0x0, &(0x7f0000000280)) 08:00:01 executing program 2: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:01 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 08:00:01 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000340)) 08:00:01 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x1000000, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x1, 0x1, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000940)={r3, r4, 0x15, 0x9bdb, 0x6}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r5, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r7, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="3f9c0c8c035133a223470000"], 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r8 = accept$nfc_llcp(r5, 0x0, &(0x7f0000000240)) bind$nfc_llcp(r8, &(0x7f0000000280)={0x27, r6, 0x1, 0x2, 0x7, 0x2, "1976ba1343a5518f319203851c5cd604ea073bc90e0e71f5a3f9d69c22b0ab27b1eaecc6f26de2079dbca135b442d7b3c87f7f21742e1ebdad9e28cd4ea21a", 0x3}, 0x60) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000980)=@IORING_OP_POLL_REMOVE={0x7, 0x58, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) 08:00:01 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, 0x0, &(0x7f0000000280)) 08:00:01 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x40a100) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000040)={0x6}) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffb1, &(0x7f00000001c0), 0x0, 0x0, 0x8, &(0x7f0000000200)=[{}, {}], 0x0, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r7 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r7, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r6}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000740)={r5, r6, r8, 0x0, 0x12fa458e, 0xc71, 0x401, 0x0, 0x80000001, 0x35, 0x7, 0x10001}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r4, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) r9 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, 0x0) r10 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x17, &(0x7f0000000e80)=ANY=[@ANYBLOB="1801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007fffffff850000000600000018110000a7e82a1f9ea416ac7c1561b9b3d3b536a1c15667e441e9894ebdaef1717c9a43503c631a43b48f40f845c57525a2c93478c3fea68f1fc9bf497f4feefd5fedf4c9227d774001c34e736e2c805b60b6beed9d4267b0da5893c28ceb463c2fbb6e5cd53f4e25cf6835b3e410c76023c423b314fdb470ab1490e6fa8bf163c532c75a858aa1a7235e95e6f344a1fa51a7f0df4ae000000000", @ANYBLOB="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", @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000001834000001000000000000000000000059243000ffffffff18400400070000000000000000000000cc491000fcffffff"], &(0x7f0000000240)='syzkaller\x00', 0x7fff, 0x28, &(0x7f00000008c0)=""/40, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x8, 0x4723dc02, 0x100}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000340)=[r0, r1, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000380)=[{0x3, 0x2, 0x9, 0xa}, {0x2, 0x4, 0x1, 0x3}, {0x2, 0x2, 0xf, 0x7}, {0x4, 0x1, 0xe}, {0x5, 0x4, 0x6, 0x7}, {0x0, 0x4, 0xa, 0x9}, {0x3, 0x4, 0xc}], 0x10, 0xff}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) 08:00:01 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x1c7c, 0x4, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 08:00:01 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x1000000, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x1, 0x1, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000940)={r3, r4, 0x15, 0x9bdb, 0x6}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r5, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r7, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="3f9c0c8c035133a223470000"], 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r8 = accept$nfc_llcp(r5, 0x0, &(0x7f0000000240)) bind$nfc_llcp(r8, &(0x7f0000000280)={0x27, r6, 0x1, 0x2, 0x7, 0x2, "1976ba1343a5518f319203851c5cd604ea073bc90e0e71f5a3f9d69c22b0ab27b1eaecc6f26de2079dbca135b442d7b3c87f7f21742e1ebdad9e28cd4ea21a", 0x3}, 0x60) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000980)=@IORING_OP_POLL_REMOVE={0x7, 0x58, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r9, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) 08:00:01 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, 0x0) 08:00:01 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x1000000, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x1, 0x1, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000940)={r3, r4, 0x15, 0x9bdb, 0x6}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r5, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r7, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="3f9c0c8c035133a223470000"], 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r8 = accept$nfc_llcp(r5, 0x0, &(0x7f0000000240)) bind$nfc_llcp(r8, &(0x7f0000000280)={0x27, r6, 0x1, 0x2, 0x7, 0x2, "1976ba1343a5518f319203851c5cd604ea073bc90e0e71f5a3f9d69c22b0ab27b1eaecc6f26de2079dbca135b442d7b3c87f7f21742e1ebdad9e28cd4ea21a", 0x3}, 0x60) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000980)=@IORING_OP_POLL_REMOVE={0x7, 0x58, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) 08:00:01 executing program 0: syz_io_uring_setup(0x5cab, 0x0, &(0x7f0000000140), &(0x7f0000000180)) 08:00:01 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, 0x0, &(0x7f0000000280)) 08:00:01 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x40a100) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x6}) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffb1, &(0x7f00000001c0), 0x0, 0x0, 0x8, &(0x7f0000000200)=[{}, {}], 0x0, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r5 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r5, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r4}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000740)={r3, r4, r6, 0x0, 0x12fa458e, 0xc71, 0x401, 0x0, 0x80000001, 0x35, 0x7, 0x10001}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r2, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, 0x0) r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) 08:00:01 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x1000000, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x1, 0x1, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000940)={r3, r4, 0x15, 0x9bdb, 0x6}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r5, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r7, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="3f9c0c8c035133a223470000"], 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r8 = accept$nfc_llcp(r5, 0x0, &(0x7f0000000240)) bind$nfc_llcp(r8, &(0x7f0000000280)={0x27, r6, 0x1, 0x2, 0x7, 0x2, "1976ba1343a5518f319203851c5cd604ea073bc90e0e71f5a3f9d69c22b0ab27b1eaecc6f26de2079dbca135b442d7b3c87f7f21742e1ebdad9e28cd4ea21a", 0x3}, 0x60) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000980)=@IORING_OP_POLL_REMOVE={0x7, 0x58, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) 08:00:01 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x1000000, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x1, 0x1, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000940)={r3, r4, 0x15, 0x9bdb, 0x6}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r5, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r7, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="3f9c0c8c035133a223470000"], 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r8 = accept$nfc_llcp(r5, 0x0, &(0x7f0000000240)) bind$nfc_llcp(r8, &(0x7f0000000280)={0x27, r6, 0x1, 0x2, 0x7, 0x2, "1976ba1343a5518f319203851c5cd604ea073bc90e0e71f5a3f9d69c22b0ab27b1eaecc6f26de2079dbca135b442d7b3c87f7f21742e1ebdad9e28cd4ea21a", 0x3}, 0x60) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r9, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) 08:00:01 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, 0x0) 08:00:01 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x40a100) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x6}) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffb1, &(0x7f00000001c0), 0x0, 0x0, 0x8, &(0x7f0000000200)=[{}, {}], 0x0, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r5 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r5, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r4}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000740)={r3, r4, r6, 0x0, 0x12fa458e, 0xc71, 0x401, 0x0, 0x80000001, 0x35, 0x7, 0x10001}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r2, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) 08:00:01 executing program 0: syz_io_uring_setup(0x5cab, 0x0, &(0x7f0000000140), &(0x7f0000000180)) 08:00:01 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x1000000, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x1, 0x1, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000940)={r3, r4, 0x15, 0x9bdb, 0x6}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r5, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r7, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="3f9c0c8c035133a223470000"], 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r8 = accept$nfc_llcp(r5, 0x0, &(0x7f0000000240)) bind$nfc_llcp(r8, &(0x7f0000000280)={0x27, r6, 0x1, 0x2, 0x7, 0x2, "1976ba1343a5518f319203851c5cd604ea073bc90e0e71f5a3f9d69c22b0ab27b1eaecc6f26de2079dbca135b442d7b3c87f7f21742e1ebdad9e28cd4ea21a", 0x3}, 0x60) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000980)=@IORING_OP_POLL_REMOVE={0x7, 0x58, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) 08:00:01 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, 0x0) 08:00:01 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, &(0x7f0000000240), 0x0) 08:00:01 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x1000000, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x1, 0x1, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000940)={r3, r4, 0x15, 0x9bdb, 0x6}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r5, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r7, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="3f9c0c8c035133a223470000"], 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r8 = accept$nfc_llcp(r5, 0x0, &(0x7f0000000240)) bind$nfc_llcp(r8, &(0x7f0000000280)={0x27, r6, 0x1, 0x2, 0x7, 0x2, "1976ba1343a5518f319203851c5cd604ea073bc90e0e71f5a3f9d69c22b0ab27b1eaecc6f26de2079dbca135b442d7b3c87f7f21742e1ebdad9e28cd4ea21a", 0x3}, 0x60) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r9, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) 08:00:01 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x40a100) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x6}) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffb1, &(0x7f00000001c0), 0x0, 0x0, 0x8, &(0x7f0000000200)=[{}, {}], 0x0, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r5 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r5, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r4}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000740)={r3, r4, r6, 0x0, 0x12fa458e, 0xc71, 0x401, 0x0, 0x80000001, 0x35, 0x7, 0x10001}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r2, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) 08:00:01 executing program 0: syz_io_uring_setup(0x5cab, 0x0, &(0x7f0000000140), &(0x7f0000000180)) 08:00:01 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x1000000, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x1, 0x1, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000940)={r3, r4, 0x15, 0x9bdb, 0x6}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r5, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r7, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="3f9c0c8c035133a223470000"], 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r8 = accept$nfc_llcp(r5, 0x0, &(0x7f0000000240)) bind$nfc_llcp(r8, &(0x7f0000000280)={0x27, r6, 0x1, 0x2, 0x7, 0x2, "1976ba1343a5518f319203851c5cd604ea073bc90e0e71f5a3f9d69c22b0ab27b1eaecc6f26de2079dbca135b442d7b3c87f7f21742e1ebdad9e28cd4ea21a", 0x3}, 0x60) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r9, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) 08:00:02 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053", 0x3e}, 0x60) 08:00:02 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, &(0x7f0000000240), 0x0) 08:00:02 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x40a100) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x6}) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffb1, &(0x7f00000001c0), 0x0, 0x0, 0x8, &(0x7f0000000200)=[{}, {}], 0x0, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r5 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r5, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r4}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000740)={r3, r4, r6, 0x0, 0x12fa458e, 0xc71, 0x401, 0x0, 0x80000001, 0x35, 0x7, 0x10001}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r2, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) 08:00:02 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053", 0x3e}, 0x60) 08:00:02 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x1000000, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x1, 0x1, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000940)={r3, r4, 0x15, 0x9bdb, 0x6}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r5, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r7, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="3f9c0c8c035133a223470000"], 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r8 = accept$nfc_llcp(r5, 0x0, &(0x7f0000000240)) bind$nfc_llcp(r8, &(0x7f0000000280)={0x27, r6, 0x1, 0x2, 0x7, 0x2, "1976ba1343a5518f319203851c5cd604ea073bc90e0e71f5a3f9d69c22b0ab27b1eaecc6f26de2079dbca135b442d7b3c87f7f21742e1ebdad9e28cd4ea21a", 0x3}, 0x60) syz_io_uring_submit(0x0, 0x0, 0x0) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r9, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) [ 1054.497914][ T1236] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.504291][ T1236] ieee802154 phy1 wpan1: encryption failed: -22 08:00:02 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053", 0x3e}, 0x60) 08:00:02 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 08:00:02 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, &(0x7f0000000240), 0x0) 08:00:02 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053", 0x3e}, 0x60) 08:00:02 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x1000000, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x1, 0x1, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000940)={r3, r4, 0x15, 0x9bdb, 0x6}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r5, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r7, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="3f9c0c8c035133a223470000"], 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r8 = accept$nfc_llcp(r5, 0x0, &(0x7f0000000240)) bind$nfc_llcp(r8, &(0x7f0000000280)={0x27, r6, 0x1, 0x2, 0x7, 0x2, "1976ba1343a5518f319203851c5cd604ea073bc90e0e71f5a3f9d69c22b0ab27b1eaecc6f26de2079dbca135b442d7b3c87f7f21742e1ebdad9e28cd4ea21a", 0x3}, 0x60) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r9, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) 08:00:02 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x40a100) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x6}) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffb1, &(0x7f00000001c0), 0x0, 0x0, 0x8, &(0x7f0000000200)=[{}, {}], 0x0, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r5 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r5, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r4}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000740)={r3, r4, r6, 0x0, 0x12fa458e, 0xc71, 0x401, 0x0, 0x80000001, 0x35, 0x7, 0x10001}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r2, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) 08:00:02 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x2, 0x0, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053", 0x3e}, 0x60) 08:00:02 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) connect$nfc_llcp(r0, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 08:00:02 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 08:00:02 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x40a100) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x6}) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffb1, &(0x7f00000001c0), 0x0, 0x0, 0x8, &(0x7f0000000200)=[{}, {}], 0x0, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r3}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000740)={r2, r3, r5, 0x0, 0x12fa458e, 0xc71, 0x401, 0x0, 0x80000001, 0x35, 0x7, 0x10001}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) 08:00:02 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r3, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)={0x10}, 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, 0x0, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966"}, 0x60, 0x0}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000002840)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053", 0x3e}, 0x60) 08:00:02 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x1000000, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x1, 0x1, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000940)={r3, r4, 0x15, 0x9bdb, 0x6}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r5, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r6, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="3f9c0c8c035133a223470000"], 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) accept$nfc_llcp(r5, 0x0, &(0x7f0000000240)) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r7, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) 08:00:02 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x40a100) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x6}) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffb1, &(0x7f00000001c0), 0x0, 0x0, 0x8, &(0x7f0000000200)=[{}, {}], 0x0, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r5 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r5, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r4}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000740)={r3, r4, r6, 0x0, 0x12fa458e, 0xc71, 0x401, 0x0, 0x80000001, 0x35, 0x7, 0x10001}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r2, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) 08:00:02 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r0, 0x8004af70, &(0x7f0000000040)) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f0000000080)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f00000000c0)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f00000001c0)=r2) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000240)) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r3, 0x4008af75, &(0x7f0000000280)={0x3}) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, 0xfffffffffffffffd) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=r4, 0x4) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000640)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000680)={0x0, r2}) openat$damon_attrs(0xffffffffffffff9c, &(0x7f00000006c0), 0x62200, 0x104) r5 = accept4$nfc_llcp(r2, &(0x7f0000000700), &(0x7f0000000780)=0x60, 0x0) accept4$nfc_llcp(r5, &(0x7f00000007c0), &(0x7f0000000840)=0x60, 0x80000) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000880)={0x1, 0x6}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000940)={&(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0], 0x5, 0x0, 0xbbbbbbbb}) 08:00:02 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 08:00:02 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x1000000, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x1, 0x1, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000940)={r3, r4, 0x15, 0x9bdb, 0x6}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r5, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r6, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="3f9c0c8c035133a223470000"], 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r7, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) 08:00:02 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x40a100) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x6}) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffb1, &(0x7f00000001c0), 0x0, 0x0, 0x8, &(0x7f0000000200)=[{}, {}], 0x0, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0]}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) 08:00:02 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r0, 0x8004af70, &(0x7f0000000040)) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f0000000080)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f00000000c0)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f00000001c0)=r2) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000240)) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r3, 0x4008af75, &(0x7f0000000280)={0x3}) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, 0xfffffffffffffffd) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=r5, 0x4) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000640)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000680)={0x0, r2}) openat$damon_attrs(0xffffffffffffff9c, &(0x7f00000006c0), 0x62200, 0x104) r6 = accept4$nfc_llcp(r2, &(0x7f0000000700), &(0x7f0000000780)=0x60, 0x0) accept4$nfc_llcp(r6, &(0x7f00000007c0), &(0x7f0000000840)=0x60, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x5, 0x3, 0x2, 0x130, 0x1, 0x2, '\x00', r4, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x48) 08:00:02 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x40a100) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x6}) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffb1, &(0x7f00000001c0), 0x0, 0x0, 0x8, &(0x7f0000000200)=[{}, {}], 0x0, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r2}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) 08:00:02 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, &(0x7f0000002840)={0xa, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 08:00:02 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, &(0x7f0000002840)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 08:00:02 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x1000000, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x1, 0x1, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000940)={r3, r4, 0x15, 0x9bdb, 0x6}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r5, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r6, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="3f9c0c8c035133a223470000"], 0x10, 0x24000880}], 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r7, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) 08:00:03 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 08:00:03 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r0, 0x8004af70, &(0x7f0000000040)) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f0000000080)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f00000000c0)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f00000001c0)=r2) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000240)) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r3, 0x4008af75, &(0x7f0000000280)={0x3}) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, 0xfffffffffffffffd) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=r5, 0x4) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000640)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000680)={0x0, r2}) openat$damon_attrs(0xffffffffffffff9c, &(0x7f00000006c0), 0x62200, 0x104) r6 = accept4$nfc_llcp(r2, &(0x7f0000000700), &(0x7f0000000780)=0x60, 0x0) accept4$nfc_llcp(r6, &(0x7f00000007c0), &(0x7f0000000840)=0x60, 0x80000) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000880)={0x1, 0x6}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000940)={&(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0], 0x5, 0x0, 0xbbbbbbbb}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980)=r5, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x5, 0x3, 0x2, 0x130, 0x1, 0x2, '\x00', r4, r7, 0x5, 0x4, 0x5}, 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r4, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000b80)={'syztnl0\x00', &(0x7f0000000b00)={'syztnl1\x00', r8, 0x2f, 0x2, 0x0, 0xff, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x20, 0x1, 0x8001, 0x8}}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000dc0)={0x1, 0x1, &(0x7f0000000bc0)=""/169, &(0x7f0000000c80)=""/198, &(0x7f0000000d80)=""/61, 0x3000}) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000e00)={0x6, 0xfffffffa}) 08:00:03 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r0, 0x8004af70, &(0x7f0000000040)) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f0000000080)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f00000000c0)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f00000001c0)=r2) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000240)) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r3, 0x4008af75, &(0x7f0000000280)={0x3}) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, 0xfffffffffffffffd) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=r5, 0x4) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000640)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000680)={0x0, r2}) openat$damon_attrs(0xffffffffffffff9c, &(0x7f00000006c0), 0x62200, 0x104) r6 = accept4$nfc_llcp(r2, &(0x7f0000000700), &(0x7f0000000780)=0x60, 0x0) accept4$nfc_llcp(r6, &(0x7f00000007c0), &(0x7f0000000840)=0x60, 0x80000) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000880)={0x1, 0x6}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000940)={&(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0], 0x5, 0x0, 0xbbbbbbbb}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980)=r5, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x5, 0x3, 0x2, 0x130, 0x1, 0x2, '\x00', r4, r7, 0x5, 0x4, 0x5}, 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r4, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000b80)={'syztnl0\x00', &(0x7f0000000b00)={'syztnl1\x00', r8, 0x2f, 0x2, 0x0, 0xff, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x20, 0x1, 0x8001, 0x8}}) 08:00:03 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, &(0x7f0000002840)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 08:00:03 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x40a100) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x6}) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffb1, &(0x7f00000001c0), 0x0, 0x0, 0x8, &(0x7f0000000200)=[{}, {}], 0x0, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000280)) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) 08:00:03 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x1000000, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x1, 0x1, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000940)={r3, r4, 0x15, 0x9bdb, 0x6}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r5, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001640)={0x27, r6, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="3f9c0c8c035133a223470000"], 0x10, 0x24000880}], 0x2, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r7, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) 08:00:03 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r0, 0x8004af70, &(0x7f0000000040)) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f0000000080)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f00000000c0)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f00000001c0)=r2) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000240)) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r3, 0x4008af75, &(0x7f0000000280)={0x3}) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, 0xfffffffffffffffd) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=r5, 0x4) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000640)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000680)={0x0, r2}) openat$damon_attrs(0xffffffffffffff9c, &(0x7f00000006c0), 0x62200, 0x104) r6 = accept4$nfc_llcp(r2, &(0x7f0000000700), &(0x7f0000000780)=0x60, 0x0) accept4$nfc_llcp(r6, &(0x7f00000007c0), &(0x7f0000000840)=0x60, 0x80000) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000880)={0x1, 0x6}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000940)={&(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0], 0x5, 0x0, 0xbbbbbbbb}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980)=r5, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x5, 0x3, 0x2, 0x130, 0x1, 0x2, '\x00', r4, r7, 0x5, 0x4, 0x5}, 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r4, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000b80)={'syztnl0\x00', &(0x7f0000000b00)={'syztnl1\x00', r8, 0x2f, 0x2, 0x0, 0xff, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x20, 0x1, 0x8001, 0x8}}) 08:00:03 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x8}}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r2 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r2, &(0x7f0000000180), 0x14) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001600)=0x0) sendmmsg$nfc_llcp(r3, &(0x7f0000001ac0)=[{&(0x7f0000000240)={0x27, r4, 0xffffffffffffffff, 0x7, 0x5, 0x9, "c29a2eeb3047f318dd5cfbe39b5caff6009653718bc8434392db42b1f830d24a73d4cafa12cb2e112d3b955546ac5ebd038aabddee50b46e36337c76cb497e", 0x30}, 0x60, &(0x7f0000000580)=[{&(0x7f00000002c0)="83dd44356b9da1d488291659088ab20d57d72a37d6b0860514d64267e94587abf361eaf14c1246b71f738e749ff0f8f3270dbac0f58ab3f008cd4d37428a20648a89e051d637d4d7e2f095aecec81340142cfd416830c14a6e9cc538e3035a777fe8e96318fb7c90d6fe00fa8a427126bab56ba145440727ea18940b90d3bca0b70256e9e679bc32e657b4e49ccabc21d7e4076b6f41c2d0c8238f9034cc1b476f2f10376224e0840634e30ff67932fc0230d8c4912d248e5bf1bb5d72c3f8bfc8b3dae4ca218f41eddc801dcc5739f7dc8646f829eac27b44a919fef9701b99759c8b71", 0xe4}, {&(0x7f00000003c0)="900834b59ad505d9b32ef9e35d1b4f305b75d09896a7dcddad3fc7d94f996183aa108b39033cbe0184d4d48b5e123f5696547613f61d346a212e707215f1488c7b2fcb371f0b9c2cbf644b04a5da67ac3ea8be56c44c711b5993a09692faaefa091ee18e98dfa45086c0665e8a98229f13edfbf9090295a6a0734ba80c44623886de7e29c589c8339bfdc809dbc9a04b0a1b90b521f5213dc4a2c7cfca3e6607426288", 0xa3}, {&(0x7f0000000480)="620904a6b6080e3c53dd965efc27b3097d4358e8502339aff89d911c6a64d95517de40196d51623a100e1ab162b4770891601246002f7dcf651013ea74d6198a80802c92d707f060254ba3f1a393a57f6e581eac33f1d74e84ffc74a3f848c2a74a8b6a42c51da1efc869bd2b3ace0ed6abd2cc00796848cfcbe4e203b5edaa34b65f1db54369ce9c74db3f204a3176037a19ce083cb8cf465b0e25e97b9a6d260e6625201bbe5e9bc439e465edc655ba0f2726bc209072f85459a8e5c2d8cf8c9e7e6a2128c90233dc1ab9842f50e05c488d364049cc9283af7283d04550194b5a3fe779d837ebccb674c5d21e5130b11", 0xf1}], 0x3, &(0x7f00000005c0)={0x1010, 0x102, 0xfffffcd1, "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"}, 0x1010, 0x20000000}, {&(0x7f0000001640)={0x27, r5, 0x0, 0x1, 0x6, 0x5, "45a96dc7d23bfc1191e59b0c57dc3dfbb365da12c258e6c3c810a6bc82318596ec21aa527ae33393913c20ed26c08a99ed6ad385bd2518ad7eaa8cc1799eb7", 0x7}, 0x60, &(0x7f0000001a40)=[{&(0x7f00000016c0)="fc480f06e381f6fbd452957504b8010566ad24aaf51fb42b316dc867b9985403e995dfdccebb23f5a4b056136638570c23b00b4aa66c48aba9b8e6852fffdee7a34299f6e5ebb53207fc70f99ca6ffdfbbe10eb29a540b2defe4e436f7a44a8f0ec1d14003385ae4d23afe27fc264e356a8c1f21f3e0bab02d18c27cf07d5140e87ba5e2514dcfcdf72e1c1fc0158aebb69e43f1b84f92dbf1ea114a07f3c5dfc6b8c910b88ee643e8da1faa61a9e8d583d3874f576c538afe1d48f4827f198b171e44d25f0156ccada915209bff36877dddcef4360850ad1326658a288aa485d0c5acec5e4afb09123a85d94f3c29f4910317374a76", 0xf6}, {&(0x7f00000017c0)="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", 0xff}, {&(0x7f00000018c0)="5f3c24e9a521bfcb8bd045477b410b97e37fab78501bede879dbdb4b2d40f096bff647e6305d423fc80a8ac85c9c18b56e32fd0cc89b3b4e5232b7c92f88f0724e7180168d0001bf008a07b33c37af71d71eebe41e665ca60ad87400d9d136694a8b75d11a3711fffc26324ba9e7365ac344fd6368eca05ef83f5e9fd3a429e79b01c6742245254f0e511587810c88585d66f75c38ca300300e45da96d61944b5226422e7dae49fc299f8ae96e930180d4f08e801d356f3e463d89c7e62a396ef56ebb", 0xc3}, {&(0x7f00000019c0)="239fb42841712c47a23dff391a436c5bb9d42521ffca6bdb0e720bd6121dce4824ac05796d22c7f6c0db439a0d9820eb34fbd8ea1281d9ad3244d2edb99361cfcfd831352320b9ed2ad2250924f96c79a90f22f823d0469889ff1a6398368f6e5fbf477a31a8f9d7551131be2cce640e2c3676d05b38dc8201", 0x79}], 0x4, &(0x7f0000001a80)={0x40, 0x0, 0x4, "c0dc690dcac18b9b74a79118390a7614c5b276e7ad5338f015ad3551763dad98ed1e34931a1f4b20c6bc7dc220"}, 0x40, 0x24000880}], 0x2, 0xd1) ioctl$VHOST_VDPA_GET_VRING_NUM(r3, 0x8002af76, &(0x7f0000001b40)) r6 = syz_io_uring_setup(0x57df, &(0x7f0000001b80)={0x0, 0x5a98, 0x200, 0x0, 0x23e, 0x0, r3}, &(0x7f0000001c00)=0x0, &(0x7f0000001c40)) syz_io_uring_submit(r7, 0x0, &(0x7f0000001c80)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd=r2, 0x2, 0x0, 0x3f, 0x0, 0x1}) syz_io_uring_setup(0x2458, &(0x7f0000001cc0)={0x0, 0x415f, 0x800, 0x2, 0x123, 0x0, r6}, &(0x7f0000001d40)=0x0, &(0x7f0000001d80)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000001dc0)=@IORING_OP_TEE={0x21, 0x54, 0x0, @fd_index=0x2, 0x0, 0x0, 0x7fffffff, 0x3, 0x1, {0x0, 0x0, r1}}) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001e00)=0x0) sendmsg$nfc_llcp(r3, &(0x7f0000002100)={&(0x7f0000001e40)={0x27, r10, 0x0, 0x3, 0x6, 0x4, "ba9d3030cd465ab465514ea7a3a7dcc8b00198c80aa6ce86a92bca9a36d4ac85fe9928b51547cc52090c7e505b19812e2d17d0b5770ca54e97b4cd03faf966", 0x6}, 0x60, &(0x7f0000001f80)=[{&(0x7f0000001ec0)="7fa26a706e8cea086035e7012fbb7766", 0x10}, {&(0x7f0000001f00)="b978774e4ef3cf0a5307a1c029aebfb8d41518add9062704cbbf12ef0b909e75a1784864f36a06b0c89f90cc8b1a20e95024f6bd577e372386a9292ef6d753772ae0e0ba3e777e9c2c1f052790bd282ec53540af905b654483c1f29e831ffc123d35965f5035345a879904875b5d99d7ae0fa9bcc080", 0x76}], 0x2, &(0x7f0000001fc0)={0x108, 0x88, 0x3, "8aea32b535bd6de5d792dc08c8284c531224d565828dc0737d91f42f08badd2c634c22bd29652577653cd53756b1df73d95ad192db70162559241c10802be96b170120c56d4854752490312e71ecc51b8c4823c756f95c69904a7d9f4bb1a4f406092eec2c30a2ea414a35ecc663ebcef8d3983bc3612e90b2600910db49d5a4c1f27ced9fd32db436e940c3ede09d037fddf2f0fc7fd4bf5f85126953e3ec39b287e4e5cf72601e15fb84710372f4fc11e477922176a27888d0f89fc109b73e173ef6b2b76ef81f337687821d74006428cbbbd2113b41db727e20782bea9ad11bb9018f7c0da8f95eb3db3ab7f4058d17ec51"}, 0x108, 0x1}, 0xc0) openat$nci(0xffffffffffffff9c, &(0x7f0000002140), 0x2, 0x0) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000002580)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002540)={&(0x7f00000021c0)={0x350, 0x12, 0x120c, 0x70bd2a, 0x25dfdbfb, {0x8, 0x0, 0x8, 0x5, {0x4e21, 0x4e21, [0x7, 0x7fffffff, 0x5, 0x2a2], [0x0, 0x6, 0x0, 0x8], r0, [0x7ff, 0x8e84]}, 0x2, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0xbe, 0x1, "9e939780fbbdef29948a3467272e2210f4ea8b99dbdfd96ce6b15aa586211af340662bac111873ff3f266d2ed40510a92f00fa6cc2f333331ec274d264f09b2b523590d9c3a0f92084c0a26c183897d35554831be87093c8b5f0a3727ff4f5404450625af0ccfbd16ab3410b6322df0f015dee0fa0116733bf5af66ccc38a4decac6cdf7891fce62e7ffc1ca33ba87d9cc2dbde07deecf1116474f49df7e7a2eecd94a228e8a3428e5dc82e4224683cde647da984e07b4586ea8"}, @INET_DIAG_REQ_BYTECODE={0xf9, 0x1, "440bd691c69bd119be5f1f14a9d95f07cf9435dce15766dad89f5830ab568cd5491a7c26f4da77d158f564064e0da154658811c2f7626f8d900692c8bd2388819c2fd90f07060edb5c7bb89f6f1c9d8d5ae9453c7402c61d16c0bad651687858fdbb4d7668d3b272a7aa138835388124041cb00151d30af0ecdef99ae30bee506d1de0976f42d126231a424892c375ad94a5197d127628dd055433038b2e331c4558c67817f9540b5ad76745ea07c4eee006591998070af18321213a2b969967921ed2ee73c9dc2305d19537483fb7c457f6b067c9a5d9d0f2640d69c3926e63138422c36d94db2124bc3a291e3772a59a887199e5"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "cd70bb1d01db3ba97581e69aef49b3e463a6014fb7828c049afbe4ff0fe8ea0fba9f7168582e4fc0ee7798e614259b22791102935677aee886da7323b20cdfeddaf282df1dfb72e38e"}, @INET_DIAG_REQ_BYTECODE={0x51, 0x1, "72045cd75fcb2ee2a362bc4c5feb6db0b2146d81bb2908599e39572b1d3c1022f4ab25527a3c23443c4e936899cc6696d3c7056d8d8909dda8fb6fbe9ea33a6027f7923279ad3db7095b5d27d7"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "a27e13412c26143a029fbc6739bc5a32ae3f2806d0f2a257f1653bbcb57ced6705fa05550cb36b310c074a17f050f63f3b40c9678d8a95e2a7fdfbe67aa4fa28e46a0afae7cf7408c2c55e9195d125a25b66c3b797a00a33005d9012c72fba1e1477b7f6fce36266e10ed9f182ceadef4fca1e5fca4b4a86e9195a493f20b19c4be01a7e4f848dbaca46e60fa9b44375274a3585ec303ddd46a9fd"}]}, 0x350}, 0x1, 0x0, 0x0, 0x8850}, 0x20048050) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 08:00:03 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, 0x8f}, &(0x7f0000000140), &(0x7f0000000180)) 08:00:03 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x40a100) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x6}) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffb1, &(0x7f00000001c0), 0x0, 0x0, 0x8, &(0x7f0000000200)=[{}, {}], 0x0, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) 08:00:03 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x1000000, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x1, 0x1, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000940)={r3, r4, 0x15, 0x9bdb, 0x6}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001600)) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r6, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) 08:00:03 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, &(0x7f0000002840)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 08:00:03 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000002840)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 08:00:03 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r0, 0x8004af70, &(0x7f0000000040)) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f0000000080)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f00000000c0)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f00000001c0)=r2) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000240)) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r3, 0x4008af75, &(0x7f0000000280)={0x3}) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, 0xfffffffffffffffd) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=r5, 0x4) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000640)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000680)={0x0, r2}) openat$damon_attrs(0xffffffffffffff9c, &(0x7f00000006c0), 0x62200, 0x104) r6 = accept4$nfc_llcp(r2, &(0x7f0000000700), &(0x7f0000000780)=0x60, 0x0) accept4$nfc_llcp(r6, &(0x7f00000007c0), &(0x7f0000000840)=0x60, 0x80000) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000880)={0x1, 0x6}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000940)={&(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0], 0x5, 0x0, 0xbbbbbbbb}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980)=r5, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x5, 0x3, 0x2, 0x130, 0x1, 0x2, '\x00', r4, r7, 0x5, 0x4, 0x5}, 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r4, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000b80)={'syztnl0\x00', &(0x7f0000000b00)={'syztnl1\x00', r8, 0x2f, 0x2, 0x0, 0xff, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x20, 0x1, 0x8001, 0x8}}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000dc0)={0x1, 0x1, &(0x7f0000000bc0)=""/169, &(0x7f0000000c80)=""/198, &(0x7f0000000d80)=""/61, 0x3000}) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000e00)={0x6, 0xfffffffa}) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000e40)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) 08:00:03 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000000140), &(0x7f0000000180)) 08:00:03 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r0, 0x8004af70, &(0x7f0000000040)) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f0000000080)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f00000000c0)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f00000001c0)=r2) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000240)) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r3, 0x4008af75, &(0x7f0000000280)={0x3}) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, 0xfffffffffffffffd) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=r5, 0x4) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000640)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000680)={0x0, r2}) openat$damon_attrs(0xffffffffffffff9c, &(0x7f00000006c0), 0x62200, 0x104) r6 = accept4$nfc_llcp(r2, &(0x7f0000000700), &(0x7f0000000780)=0x60, 0x0) accept4$nfc_llcp(r6, &(0x7f00000007c0), &(0x7f0000000840)=0x60, 0x80000) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000880)={0x1, 0x6}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000940)={&(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0], 0x5, 0x0, 0xbbbbbbbb}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980)=r5, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x5, 0x3, 0x2, 0x130, 0x1, 0x2, '\x00', r4, r7, 0x5, 0x4, 0x5}, 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', r4, 0x29, 0x8, 0xed, 0x0, 0x0, @mcast2, @empty, 0x8, 0x1, 0x200, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000b80)={'syztnl0\x00', &(0x7f0000000b00)={'syztnl1\x00', r8, 0x2f, 0x2, 0x0, 0xff, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x20, 0x1, 0x8001, 0x8}}) 08:00:03 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x40a100) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x6}) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffb1, &(0x7f00000001c0), 0x0, 0x0, 0x8, &(0x7f0000000200)=[{}, {}], 0x0, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) 08:00:03 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000002840)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 08:00:03 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x1000000, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x1, 0x1, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000940)={r3, r4, 0x15, 0x9bdb, 0x6}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000200)) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r6, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) 08:00:03 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x0, &(0x7f0000000180)) 08:00:03 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) (fail_nth: 1) 08:00:03 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x1000000, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x1, 0x1, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000940)={r3, r4, 0x15, 0x9bdb, 0x6}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) 08:00:03 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000002840)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 08:00:03 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x40a100) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x6}) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffb1, &(0x7f00000001c0), 0x0, 0x0, 0x8, &(0x7f0000000200)=[{}, {}], 0x0, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) 08:00:03 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) (fail_nth: 1) [ 1056.336855][ T2305] FAULT_INJECTION: forcing a failure. [ 1056.336855][ T2305] name fail_usercopy, interval 1, probability 0, space 0, times 0 08:00:04 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x0, 0x0) 08:00:04 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, &(0x7f0000002840)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) [ 1056.406868][ T2305] CPU: 1 PID: 2305 Comm: syz-executor.3 Not tainted 6.7.0-syzkaller-10085-g1b1934dbbdcf #0 [ 1056.416925][ T2305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1056.424103][ T2311] FAULT_INJECTION: forcing a failure. [ 1056.424103][ T2311] name failslab, interval 1, probability 0, space 0, times 1 [ 1056.426988][ T2305] Call Trace: [ 1056.427001][ T2305] [ 1056.427011][ T2305] dump_stack_lvl+0x1e7/0x2d0 [ 1056.427055][ T2305] ? tcp_gro_dev_warn+0x260/0x260 [ 1056.427081][ T2305] ? panic+0x850/0x850 [ 1056.459802][ T2305] ? __lock_acquire+0x1fd0/0x1fd0 [ 1056.464878][ T2305] ? __mutex_unlock_slowpath+0x21c/0x750 [ 1056.470641][ T2305] should_fail_ex+0x3aa/0x4e0 [ 1056.475375][ T2305] _copy_from_user+0x2f/0xe0 [ 1056.480006][ T2305] __se_sys_io_uring_setup+0x144/0x330 [ 1056.485521][ T2305] ? __x64_sys_io_uring_setup+0x60/0x60 [ 1056.491087][ T2305] ? do_syscall_64+0x102/0x230 [ 1056.495863][ T2305] ? do_syscall_64+0xb4/0x230 [ 1056.500551][ T2305] do_syscall_64+0xf5/0x230 [ 1056.505076][ T2305] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1056.511002][ T2305] RIP: 0033:0x7fe43ae7cda9 [ 1056.515429][ T2305] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1056.535044][ T2305] RSP: 002b:00007fe43bb28058 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1056.543475][ T2305] RAX: ffffffffffffffda RBX: 00007fe43afabf80 RCX: 00007fe43ae7cda9 [ 1056.551452][ T2305] RDX: 0000000020000280 RSI: 00000000200001c0 RDI: 0000000000004ec8 [ 1056.559431][ T2305] RBP: 00007fe43bb28120 R08: 0000000000000000 R09: 0000000020000280 [ 1056.567412][ T2305] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200001c0 [ 1056.575388][ T2305] R13: 0000000020000240 R14: 0000000000004ec8 R15: 0000000020000280 [ 1056.583371][ T2305] 08:00:04 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x40a100) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x6}) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffb1, &(0x7f00000001c0), 0x0, 0x0, 0x8, &(0x7f0000000200)=[{}, {}], 0x0, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) 08:00:04 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x1000000, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x1, 0x1, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000940)={r3, r4, 0x15, 0x9bdb, 0x6}) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) 08:00:04 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) (fail_nth: 2) [ 1056.661678][ T2311] CPU: 1 PID: 2311 Comm: syz-executor.2 Not tainted 6.7.0-syzkaller-10085-g1b1934dbbdcf #0 [ 1056.671727][ T2311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1056.681823][ T2311] Call Trace: [ 1056.685141][ T2311] [ 1056.688114][ T2311] dump_stack_lvl+0x1e7/0x2d0 [ 1056.692847][ T2311] ? tcp_gro_dev_warn+0x260/0x260 [ 1056.697923][ T2311] ? panic+0x850/0x850 [ 1056.702056][ T2311] ? __might_sleep+0xe0/0xe0 [ 1056.706745][ T2311] should_fail_ex+0x3aa/0x4e0 [ 1056.711470][ T2311] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1056.717240][ T2311] should_failslab+0x9/0x20 [ 1056.721771][ T2311] __kmalloc+0xe6/0x490 [ 1056.725945][ T2311] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 1056.731681][ T2311] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1056.737247][ T2311] tomoyo_path_number_perm+0x23a/0x870 [ 1056.742722][ T2311] ? tomoyo_path_number_perm+0x208/0x870 [ 1056.748378][ T2311] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1056.753861][ T2311] ? read_lock_is_recursive+0x20/0x20 [ 1056.759267][ T2311] ? __fget_files+0x28/0x470 [ 1056.763885][ T2311] ? __fget_files+0x3f4/0x470 [ 1056.768580][ T2311] ? __fget_files+0x28/0x470 [ 1056.773186][ T2311] security_file_ioctl+0x71/0xa0 [ 1056.778152][ T2311] __se_sys_ioctl+0x47/0x170 [ 1056.782764][ T2311] do_syscall_64+0xf5/0x230 [ 1056.787286][ T2311] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1056.793196][ T2311] RIP: 0033:0x7fc54c27cda9 [ 1056.797618][ T2311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1056.817232][ T2311] RSP: 002b:00007fc54b5ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1056.825659][ T2311] RAX: ffffffffffffffda RBX: 00007fc54c3abf80 RCX: 00007fc54c27cda9 [ 1056.833631][ T2311] RDX: 0000000020000340 RSI: 00000000c01c64ad RDI: 0000000000000003 [ 1056.841615][ T2311] RBP: 00007fc54b5ff120 R08: 0000000000000000 R09: 0000000000000000 [ 1056.849677][ T2311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1056.857651][ T2311] R13: 000000000000000b R14: 00007fc54c3abf80 R15: 00007ffdd357e7b8 [ 1056.865645][ T2311] 08:00:04 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) (fail_nth: 2) [ 1056.907930][ T2311] ERROR: Out of memory at tomoyo_realpath_from_path. 08:00:04 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x1000000, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x1, 0x1, 0x8, 0x1}) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) 08:00:04 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x40a100) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x6}) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x141200, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) 08:00:04 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, &(0x7f0000002840)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 08:00:04 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x0, 0x0) (fail_nth: 1) [ 1057.076608][ T2331] FAULT_INJECTION: forcing a failure. [ 1057.076608][ T2331] name failslab, interval 1, probability 0, space 0, times 0 [ 1057.131580][ T2338] FAULT_INJECTION: forcing a failure. [ 1057.131580][ T2338] name failslab, interval 1, probability 0, space 0, times 0 [ 1057.138189][ T2331] CPU: 1 PID: 2331 Comm: syz-executor.3 Not tainted 6.7.0-syzkaller-10085-g1b1934dbbdcf #0 [ 1057.154221][ T2331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1057.164314][ T2331] Call Trace: [ 1057.166282][ T2342] FAULT_INJECTION: forcing a failure. [ 1057.166282][ T2342] name fail_usercopy, interval 1, probability 0, space 0, times 0 08:00:04 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x40a100) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x6}) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) [ 1057.167600][ T2331] [ 1057.167612][ T2331] dump_stack_lvl+0x1e7/0x2d0 [ 1057.188305][ T2331] ? tcp_gro_dev_warn+0x260/0x260 [ 1057.193377][ T2331] ? panic+0x850/0x850 [ 1057.197507][ T2331] should_fail_ex+0x3aa/0x4e0 [ 1057.202233][ T2331] ? io_ring_ctx_alloc+0x54/0xb50 [ 1057.207296][ T2331] should_failslab+0x9/0x20 [ 1057.211847][ T2331] kmalloc_trace+0x76/0x360 [ 1057.216395][ T2331] ? __might_fault+0xa5/0x120 [ 1057.221319][ T2331] io_ring_ctx_alloc+0x54/0xb50 [ 1057.226209][ T2331] ? __mutex_unlock_slowpath+0x21c/0x750 [ 1057.231882][ T2331] io_uring_create+0x2ca/0x12f0 [ 1057.236784][ T2331] ? __might_fault+0xc1/0x120 [ 1057.241510][ T2331] __se_sys_io_uring_setup+0x2b6/0x330 [ 1057.246998][ T2331] ? __x64_sys_io_uring_setup+0x60/0x60 [ 1057.252574][ T2331] ? do_syscall_64+0x102/0x230 [ 1057.257370][ T2331] ? do_syscall_64+0xb4/0x230 [ 1057.262082][ T2331] do_syscall_64+0xf5/0x230 [ 1057.266636][ T2331] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1057.272562][ T2331] RIP: 0033:0x7fe43ae7cda9 [ 1057.277011][ T2331] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1057.296670][ T2331] RSP: 002b:00007fe43bb28058 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1057.305126][ T2331] RAX: ffffffffffffffda RBX: 00007fe43afabf80 RCX: 00007fe43ae7cda9 [ 1057.313125][ T2331] RDX: 0000000020000280 RSI: 00000000200001c0 RDI: 0000000000004ec8 [ 1057.321127][ T2331] RBP: 00007fe43bb28120 R08: 0000000000000000 R09: 0000000020000280 [ 1057.329127][ T2331] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200001c0 [ 1057.337164][ T2331] R13: 0000000020000240 R14: 0000000000004ec8 R15: 0000000020000280 [ 1057.345188][ T2331] [ 1057.364336][ T2338] CPU: 0 PID: 2338 Comm: syz-executor.2 Not tainted 6.7.0-syzkaller-10085-g1b1934dbbdcf #0 [ 1057.374369][ T2338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1057.384445][ T2338] Call Trace: [ 1057.387739][ T2338] [ 1057.390709][ T2338] dump_stack_lvl+0x1e7/0x2d0 [ 1057.395419][ T2338] ? tcp_gro_dev_warn+0x260/0x260 [ 1057.400503][ T2338] ? panic+0x850/0x850 [ 1057.404614][ T2338] ? __might_sleep+0xe0/0xe0 [ 1057.409236][ T2338] should_fail_ex+0x3aa/0x4e0 [ 1057.413935][ T2338] ? tomoyo_encode+0x26f/0x530 [ 1057.418719][ T2338] should_failslab+0x9/0x20 [ 1057.423241][ T2338] __kmalloc+0xe6/0x490 [ 1057.427419][ T2338] ? prepend_path+0xbe0/0xbe0 [ 1057.432119][ T2338] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1057.437868][ T2338] ? rcu_is_watching+0x15/0xb0 [ 1057.442676][ T2338] tomoyo_encode+0x26f/0x530 [ 1057.447319][ T2338] tomoyo_realpath_from_path+0x598/0x5e0 [ 1057.453015][ T2338] tomoyo_path_number_perm+0x23a/0x870 [ 1057.458529][ T2338] ? tomoyo_path_number_perm+0x208/0x870 [ 1057.464213][ T2338] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1057.469738][ T2338] ? read_lock_is_recursive+0x20/0x20 [ 1057.475169][ T2338] ? __fget_files+0x28/0x470 08:00:05 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x1000000, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5, 0x1, 0x8}) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) [ 1057.479797][ T2338] ? __fget_files+0x3f4/0x470 [ 1057.484508][ T2338] ? __fget_files+0x28/0x470 [ 1057.489135][ T2338] security_file_ioctl+0x71/0xa0 [ 1057.494096][ T2338] __se_sys_ioctl+0x47/0x170 [ 1057.498717][ T2338] do_syscall_64+0xf5/0x230 [ 1057.503283][ T2338] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1057.509223][ T2338] RIP: 0033:0x7fc54c27cda9 [ 1057.513674][ T2338] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 08:00:05 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) (fail_nth: 3) [ 1057.533345][ T2338] RSP: 002b:00007fc54b5ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1057.541798][ T2338] RAX: ffffffffffffffda RBX: 00007fc54c3abf80 RCX: 00007fc54c27cda9 [ 1057.549802][ T2338] RDX: 0000000020000340 RSI: 00000000c01c64ad RDI: 0000000000000003 [ 1057.557804][ T2338] RBP: 00007fc54b5ff120 R08: 0000000000000000 R09: 0000000000000000 [ 1057.565805][ T2338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1057.573807][ T2338] R13: 000000000000000b R14: 00007fc54c3abf80 R15: 00007ffdd357e7b8 [ 1057.581833][ T2338] [ 1057.584876][ T2342] CPU: 1 PID: 2342 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-10085-g1b1934dbbdcf #0 [ 1057.594974][ T2342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1057.605042][ T2342] Call Trace: [ 1057.608337][ T2342] [ 1057.611275][ T2342] dump_stack_lvl+0x1e7/0x2d0 [ 1057.615970][ T2342] ? tcp_gro_dev_warn+0x260/0x260 [ 1057.621109][ T2342] ? panic+0x850/0x850 [ 1057.625193][ T2342] ? __lock_acquire+0x1fd0/0x1fd0 [ 1057.630234][ T2342] ? __mutex_unlock_slowpath+0x21c/0x750 [ 1057.635881][ T2342] should_fail_ex+0x3aa/0x4e0 [ 1057.640580][ T2342] _copy_from_user+0x2f/0xe0 [ 1057.645194][ T2342] __se_sys_io_uring_setup+0x144/0x330 [ 1057.650658][ T2342] ? __x64_sys_io_uring_setup+0x60/0x60 [ 1057.656220][ T2342] ? do_syscall_64+0x102/0x230 [ 1057.661082][ T2342] ? do_syscall_64+0xb4/0x230 [ 1057.665782][ T2342] do_syscall_64+0xf5/0x230 [ 1057.670297][ T2342] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1057.676207][ T2342] RIP: 0033:0x7f0ea367cda9 [ 1057.680633][ T2342] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1057.700248][ T2342] RSP: 002b:00007f0ea441a058 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1057.708679][ T2342] RAX: ffffffffffffffda RBX: 00007f0ea37abf80 RCX: 00007f0ea367cda9 [ 1057.716677][ T2342] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000005cab [ 1057.724651][ T2342] RBP: 00007f0ea441a120 R08: 0000000000000000 R09: 0000000000000000 [ 1057.732625][ T2342] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1057.740602][ T2342] R13: 0000000000000000 R14: 0000000000005cab R15: 0000000000000000 [ 1057.748591][ T2342] 08:00:05 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, &(0x7f0000002840)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 08:00:05 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x40a100) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x6}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) [ 1057.821863][ T2338] ERROR: Out of memory at tomoyo_realpath_from_path. 08:00:05 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x1000000, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) 08:00:05 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) (fail_nth: 3) [ 1057.868020][ T2354] FAULT_INJECTION: forcing a failure. [ 1057.868020][ T2354] name fail_page_alloc, interval 1, probability 0, space 0, times 1 08:00:05 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x1000000, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$smackfs_logging(r1, &(0x7f0000000180), 0x14) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) [ 1057.928083][ T2354] CPU: 0 PID: 2354 Comm: syz-executor.3 Not tainted 6.7.0-syzkaller-10085-g1b1934dbbdcf #0 [ 1057.937420][ T2359] FAULT_INJECTION: forcing a failure. [ 1057.937420][ T2359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1057.938107][ T2354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1057.961239][ T2354] Call Trace: [ 1057.964555][ T2354] [ 1057.967523][ T2354] dump_stack_lvl+0x1e7/0x2d0 [ 1057.972237][ T2354] ? tcp_gro_dev_warn+0x260/0x260 08:00:05 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, &(0x7f0000002840)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) [ 1057.977298][ T2354] ? panic+0x850/0x850 [ 1057.981422][ T2354] ? stack_depot_save_flags+0x1fa/0x650 [ 1057.987012][ T2354] should_fail_ex+0x3aa/0x4e0 [ 1057.991821][ T2354] prepare_alloc_pages+0x1d9/0x5b0 [ 1057.996980][ T2354] __alloc_pages+0x165/0x680 [ 1058.001618][ T2354] ? zone_statistics+0x170/0x170 [ 1058.006612][ T2354] ? __asan_memset+0x23/0x40 [ 1058.011327][ T2354] __kmalloc_large_node+0x91/0x1d0 [ 1058.016502][ T2354] ? io_alloc_hash_table+0x3a/0xb0 [ 1058.021654][ T2354] __kmalloc+0x317/0x490 08:00:05 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x1000000, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) [ 1058.025942][ T2354] ? io_ring_ctx_alloc+0x54/0xb50 [ 1058.031018][ T2354] io_alloc_hash_table+0x3a/0xb0 [ 1058.035989][ T2354] io_ring_ctx_alloc+0x133/0xb50 [ 1058.040978][ T2354] io_uring_create+0x2ca/0x12f0 [ 1058.045869][ T2354] ? __might_fault+0xc1/0x120 [ 1058.050603][ T2354] __se_sys_io_uring_setup+0x2b6/0x330 [ 1058.056105][ T2354] ? __x64_sys_io_uring_setup+0x60/0x60 [ 1058.061698][ T2354] ? do_syscall_64+0x102/0x230 [ 1058.066489][ T2354] ? do_syscall_64+0xb4/0x230 [ 1058.071201][ T2354] do_syscall_64+0xf5/0x230 [ 1058.075779][ T2354] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1058.081719][ T2354] RIP: 0033:0x7fe43ae7cda9 [ 1058.086197][ T2354] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1058.105837][ T2354] RSP: 002b:00007fe43bb28058 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1058.114284][ T2354] RAX: ffffffffffffffda RBX: 00007fe43afabf80 RCX: 00007fe43ae7cda9 [ 1058.122284][ T2354] RDX: 0000000020000280 RSI: 00000000200001c0 RDI: 0000000000004ec8 [ 1058.130279][ T2354] RBP: 00007fe43bb28120 R08: 0000000000000000 R09: 0000000020000280 [ 1058.138270][ T2354] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200001c0 [ 1058.146264][ T2354] R13: 0000000020000240 R14: 0000000000004ec8 R15: 0000000020000280 [ 1058.154286][ T2354] [ 1058.157435][ T2359] CPU: 1 PID: 2359 Comm: syz-executor.2 Not tainted 6.7.0-syzkaller-10085-g1b1934dbbdcf #0 [ 1058.167453][ T2359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1058.177539][ T2359] Call Trace: [ 1058.180845][ T2359] [ 1058.183809][ T2359] dump_stack_lvl+0x1e7/0x2d0 [ 1058.188536][ T2359] ? tcp_gro_dev_warn+0x260/0x260 [ 1058.193606][ T2359] ? panic+0x850/0x850 [ 1058.197722][ T2359] ? __lock_acquire+0x1fd0/0x1fd0 [ 1058.202793][ T2359] ? smack_log+0x123/0x540 [ 1058.207281][ T2359] should_fail_ex+0x3aa/0x4e0 [ 1058.212011][ T2359] _copy_from_user+0x2f/0xe0 [ 1058.216645][ T2359] drm_ioctl+0x59c/0xb00 [ 1058.220977][ T2359] ? drm_mode_closefb_ioctl+0x1c0/0x1c0 [ 1058.226572][ T2359] ? drm_ioctl_kernel+0x430/0x430 [ 1058.231662][ T2359] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1058.236667][ T2359] ? security_file_ioctl+0x81/0xa0 [ 1058.241819][ T2359] ? drm_ioctl_kernel+0x430/0x430 [ 1058.246906][ T2359] __se_sys_ioctl+0xf8/0x170 [ 1058.251536][ T2359] do_syscall_64+0xf5/0x230 [ 1058.256089][ T2359] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1058.262031][ T2359] RIP: 0033:0x7fc54c27cda9 [ 1058.266482][ T2359] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1058.286130][ T2359] RSP: 002b:00007fc54b5ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1058.294573][ T2359] RAX: ffffffffffffffda RBX: 00007fc54c3abf80 RCX: 00007fc54c27cda9 [ 1058.302557][ T2359] RDX: 0000000020000340 RSI: 00000000c01c64ad RDI: 0000000000000003 [ 1058.310534][ T2359] RBP: 00007fc54b5ff120 R08: 0000000000000000 R09: 0000000000000000 [ 1058.318517][ T2359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 08:00:06 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x1000000, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) 08:00:06 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x40a100) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) [ 1058.326495][ T2359] R13: 000000000000000b R14: 00007fc54c3abf80 R15: 00007ffdd357e7b8 [ 1058.334482][ T2359] 08:00:06 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x0, 0x0) (fail_nth: 2) 08:00:06 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, &(0x7f0000002840)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 08:00:06 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, &(0x7f0000002840)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 08:00:06 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) (fail_nth: 4) 08:00:06 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) 08:00:06 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) (fail_nth: 4) 08:00:06 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x1000000, 0x8}}) r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) [ 1058.543583][ T2375] FAULT_INJECTION: forcing a failure. [ 1058.543583][ T2375] name failslab, interval 1, probability 0, space 0, times 0 [ 1058.579271][ T2374] FAULT_INJECTION: forcing a failure. [ 1058.579271][ T2374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1058.599766][ T2375] CPU: 1 PID: 2375 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-10085-g1b1934dbbdcf #0 [ 1058.609928][ T2375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1058.620105][ T2375] Call Trace: [ 1058.623416][ T2375] [ 1058.626376][ T2375] dump_stack_lvl+0x1e7/0x2d0 [ 1058.631098][ T2375] ? tcp_gro_dev_warn+0x260/0x260 [ 1058.636160][ T2375] ? panic+0x850/0x850 [ 1058.640294][ T2375] should_fail_ex+0x3aa/0x4e0 08:00:06 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) [ 1058.645029][ T2375] ? io_ring_ctx_alloc+0x54/0xb50 [ 1058.650707][ T2375] should_failslab+0x9/0x20 [ 1058.655265][ T2375] kmalloc_trace+0x76/0x360 [ 1058.659844][ T2375] ? __might_fault+0xa5/0x120 [ 1058.664573][ T2375] io_ring_ctx_alloc+0x54/0xb50 [ 1058.669474][ T2375] ? __mutex_unlock_slowpath+0x21c/0x750 [ 1058.675160][ T2375] io_uring_create+0x2ca/0x12f0 [ 1058.680069][ T2375] ? __might_fault+0xc1/0x120 [ 1058.684798][ T2375] __se_sys_io_uring_setup+0x2b6/0x330 [ 1058.690315][ T2375] ? __x64_sys_io_uring_setup+0x60/0x60 08:00:06 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, &(0x7f0000002840)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 08:00:06 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) [ 1058.695916][ T2375] ? do_syscall_64+0x102/0x230 [ 1058.700725][ T2375] ? do_syscall_64+0xb4/0x230 [ 1058.705439][ T2375] do_syscall_64+0xf5/0x230 [ 1058.709979][ T2375] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1058.715912][ T2375] RIP: 0033:0x7f0ea367cda9 [ 1058.720361][ T2375] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1058.740005][ T2375] RSP: 002b:00007f0ea441a058 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1058.748561][ T2375] RAX: ffffffffffffffda RBX: 00007f0ea37abf80 RCX: 00007f0ea367cda9 [ 1058.756611][ T2375] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000005cab [ 1058.764618][ T2375] RBP: 00007f0ea441a120 R08: 0000000000000000 R09: 0000000000000000 [ 1058.772628][ T2375] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1058.780636][ T2375] R13: 0000000000000000 R14: 0000000000005cab R15: 0000000000000000 [ 1058.789263][ T2375] 08:00:06 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) [ 1058.810082][ T2374] CPU: 1 PID: 2374 Comm: syz-executor.2 Not tainted 6.7.0-syzkaller-10085-g1b1934dbbdcf #0 [ 1058.820124][ T2374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1058.830216][ T2374] Call Trace: [ 1058.833534][ T2374] [ 1058.836498][ T2374] dump_stack_lvl+0x1e7/0x2d0 [ 1058.841223][ T2374] ? tcp_gro_dev_warn+0x260/0x260 [ 1058.846289][ T2374] ? panic+0x850/0x850 [ 1058.850408][ T2374] ? __lock_acquire+0x1fd0/0x1fd0 [ 1058.855475][ T2374] ? drm_ioctl_kernel+0x308/0x430 [ 1058.860560][ T2374] should_fail_ex+0x3aa/0x4e0 [ 1058.861639][ T2387] FAULT_INJECTION: forcing a failure. [ 1058.861639][ T2387] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1058.865268][ T2374] _copy_to_user+0x2f/0xa0 [ 1058.865300][ T2374] drm_ioctl+0x663/0xb00 [ 1058.865331][ T2374] ? drm_mode_closefb_ioctl+0x1c0/0x1c0 [ 1058.865363][ T2374] ? drm_ioctl_kernel+0x430/0x430 [ 1058.865406][ T2374] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1058.865435][ T2374] ? security_file_ioctl+0x81/0xa0 08:00:06 executing program 5: socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) [ 1058.865459][ T2374] ? drm_ioctl_kernel+0x430/0x430 [ 1058.865487][ T2374] __se_sys_ioctl+0xf8/0x170 [ 1058.865510][ T2374] do_syscall_64+0xf5/0x230 [ 1058.865535][ T2374] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1058.865563][ T2374] RIP: 0033:0x7fc54c27cda9 [ 1058.865581][ T2374] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1058.865597][ T2374] RSP: 002b:00007fc54b5ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1058.865620][ T2374] RAX: ffffffffffffffda RBX: 00007fc54c3abf80 RCX: 00007fc54c27cda9 [ 1058.865635][ T2374] RDX: 0000000020000340 RSI: 00000000c01c64ad RDI: 0000000000000003 [ 1058.865648][ T2374] RBP: 00007fc54b5ff120 R08: 0000000000000000 R09: 0000000000000000 [ 1058.865661][ T2374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1058.865674][ T2374] R13: 000000000000000b R14: 00007fc54c3abf80 R15: 00007ffdd357e7b8 [ 1058.865704][ T2374] [ 1059.022928][ T2387] CPU: 0 PID: 2387 Comm: syz-executor.3 Not tainted 6.7.0-syzkaller-10085-g1b1934dbbdcf #0 [ 1059.033142][ T2387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1059.043332][ T2387] Call Trace: [ 1059.046646][ T2387] [ 1059.049611][ T2387] dump_stack_lvl+0x1e7/0x2d0 [ 1059.054363][ T2387] ? tcp_gro_dev_warn+0x260/0x260 [ 1059.059427][ T2387] ? panic+0x850/0x850 [ 1059.063529][ T2387] should_fail_ex+0x3aa/0x4e0 [ 1059.068325][ T2387] prepare_alloc_pages+0x1d9/0x5b0 [ 1059.073464][ T2387] __alloc_pages+0x165/0x680 [ 1059.078074][ T2387] ? zone_statistics+0x170/0x170 [ 1059.083037][ T2387] ? lockdep_init_map_type+0xa1/0x900 [ 1059.088432][ T2387] ? lockdep_softirqs_off+0x430/0x430 [ 1059.093819][ T2387] ? __phys_addr+0xba/0x170 [ 1059.098338][ T2387] __kmalloc_large_node+0x91/0x1d0 [ 1059.103481][ T2387] ? io_alloc_hash_table+0x3a/0xb0 [ 1059.108604][ T2387] __kmalloc+0x317/0x490 [ 1059.113307][ T2387] io_alloc_hash_table+0x3a/0xb0 [ 1059.118259][ T2387] io_ring_ctx_alloc+0x166/0xb50 [ 1059.123224][ T2387] io_uring_create+0x2ca/0x12f0 [ 1059.128093][ T2387] ? __might_fault+0xc1/0x120 [ 1059.132791][ T2387] __se_sys_io_uring_setup+0x2b6/0x330 [ 1059.138268][ T2387] ? __x64_sys_io_uring_setup+0x60/0x60 [ 1059.144018][ T2387] ? do_syscall_64+0x102/0x230 [ 1059.148800][ T2387] ? do_syscall_64+0xb4/0x230 [ 1059.153510][ T2387] do_syscall_64+0xf5/0x230 [ 1059.158024][ T2387] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1059.163929][ T2387] RIP: 0033:0x7fe43ae7cda9 [ 1059.168351][ T2387] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1059.187963][ T2387] RSP: 002b:00007fe43bb28058 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1059.196388][ T2387] RAX: ffffffffffffffda RBX: 00007fe43afabf80 RCX: 00007fe43ae7cda9 [ 1059.204368][ T2387] RDX: 0000000020000280 RSI: 00000000200001c0 RDI: 0000000000004ec8 [ 1059.212346][ T2387] RBP: 00007fe43bb28120 R08: 0000000000000000 R09: 0000000020000280 [ 1059.220327][ T2387] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200001c0 [ 1059.228389][ T2387] R13: 0000000020000240 R14: 0000000000004ec8 R15: 0000000020000280 [ 1059.236392][ T2387] 08:00:06 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) (fail_nth: 5) 08:00:06 executing program 5: socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) 08:00:06 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, &(0x7f0000002840)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 08:00:06 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) 08:00:06 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x0, 0x0) (fail_nth: 3) 08:00:06 executing program 5: socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="1b163ccbdb10ac234bbcdf59c400ca751acff8b5ecdf471728cbdda628107b1460cbc5eebec37b7e5e025be6bab32e43b412c0a5b9e266c3b7e263e7ef6a368921ae2cef59eca17ccdec95b5f487047609b42d0aa7d606da18eb42db8e0d2ac7b89af80f14bafb30e8fc20d7fd4ad69d993a3861dd41469cefe2eee7bb0bde097fcf5268290d6cc50c2d7226f89084422ee3a818a58533954ca5a3533801b916f220821b2d58f26d7be182e14ed9c60bcdacb3d3c8b8391f387f7568", 0xbc, 0x0, &(0x7f0000000440)={0x2, 0xc1, {0x1, 0xc, 0x85, "d8be69bae448e5271cd9f272185f8f861cc0f71f0c7c27b72d06c0dffad4eda88a76ea2fb366c63b4e8701aeada724ed7fa5440180bad9a7fc9ce3a5b5e6d6386c80ef19346cd13604997e778a377b09057e133052f89de76f4c8109f57c57d24927ba7f498e40da9fd7b07f81813b2c7cfe4fa84c366c6bbed123cd2642a34cf23d7be49b", 0x2f, "f8f9b6287869a98031dd26ab8d053a167a9b4116e8813aed376883fe81be9bea30a25f546f2693b32732e6605911bf"}, 0xd9, "eb441fa477771d60ff55b923f839d70cfadf15b99f7ebd0278d6eb7f59f9c93374b8e0ca7c8358bd44c3679b5d0f7090e1f63aaaace688e924fcde5905ae3b3f36417718a434d0cf298746815f08c75cc74e1473d5ffb2b6ef4ee60eebcc6c15e01a51334e014c77a8864799ed8633398ee86a948b31ee64629db990804397583ed4a35e85b1922c2848b45372755ed27d99be9350dd98c02433735cfc3b098dd8394ec04e3efffa8827f2414f0fa53b103d9a2423413509d744c88d87d157273e37df5bc3f41b1fc87cff55254e217599c5777fc415b42b1a"}, 0x1a6}) 08:00:07 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) (fail_nth: 5) 08:00:07 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) connect$nfc_llcp(r0, &(0x7f0000002840)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) [ 1059.432989][ T2401] FAULT_INJECTION: forcing a failure. [ 1059.432989][ T2401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1059.485235][ T2401] CPU: 1 PID: 2401 Comm: syz-executor.2 Not tainted 6.7.0-syzkaller-10085-g1b1934dbbdcf #0 [ 1059.495278][ T2401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1059.505368][ T2401] Call Trace: [ 1059.508677][ T2401] [ 1059.511718][ T2401] dump_stack_lvl+0x1e7/0x2d0 [ 1059.516499][ T2401] ? tcp_gro_dev_warn+0x260/0x260 [ 1059.521568][ T2401] ? panic+0x850/0x850 [ 1059.525695][ T2401] ? snprintf+0xda/0x120 [ 1059.529989][ T2401] should_fail_ex+0x3aa/0x4e0 [ 1059.534726][ T2401] _copy_to_user+0x2f/0xa0 [ 1059.539194][ T2401] simple_read_from_buffer+0xca/0x150 [ 1059.544616][ T2401] proc_fail_nth_read+0x1e9/0x250 [ 1059.549690][ T2401] ? proc_fault_inject_write+0x3c0/0x3c0 [ 1059.555369][ T2401] ? rw_verify_area+0x402/0x570 [ 1059.560250][ T2401] ? proc_fault_inject_write+0x3c0/0x3c0 [ 1059.566014][ T2401] vfs_read+0x207/0x900 [ 1059.570216][ T2401] ? kernel_read+0x70/0x70 [ 1059.574672][ T2401] ? __fget_files+0x3f4/0x470 [ 1059.577943][ T2409] FAULT_INJECTION: forcing a failure. [ 1059.577943][ T2409] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1059.579361][ T2401] ? __fget_files+0x28/0x470 [ 1059.579427][ T2401] ? __fdget_pos+0x258/0x320 [ 1059.601836][ T2401] ksys_read+0x1a0/0x2c0 [ 1059.606127][ T2401] ? vfs_write+0xaf0/0xaf0 [ 1059.610578][ T2401] ? do_syscall_64+0x102/0x230 [ 1059.615383][ T2401] ? do_syscall_64+0xb4/0x230 [ 1059.620100][ T2401] do_syscall_64+0xf5/0x230 [ 1059.624648][ T2401] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1059.630590][ T2401] RIP: 0033:0x7fc54c27ba4c [ 1059.635031][ T2401] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 1059.654676][ T2401] RSP: 002b:00007fc54b5ff0c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1059.663148][ T2401] RAX: ffffffffffffffda RBX: 00007fc54c3abf80 RCX: 00007fc54c27ba4c [ 1059.671233][ T2401] RDX: 000000000000000f RSI: 00007fc54b5ff130 RDI: 0000000000000004 08:00:07 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, 0x0) [ 1059.679235][ T2401] RBP: 00007fc54b5ff120 R08: 0000000000000000 R09: 0000000000000000 [ 1059.687256][ T2401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1059.695261][ T2401] R13: 000000000000000b R14: 00007fc54c3abf80 R15: 00007ffdd357e7b8 [ 1059.703291][ T2401] [ 1059.711584][ T2407] FAULT_INJECTION: forcing a failure. [ 1059.711584][ T2407] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1059.725991][ T2407] CPU: 1 PID: 2407 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-10085-g1b1934dbbdcf #0 08:00:07 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) [ 1059.736019][ T2407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1059.746112][ T2407] Call Trace: [ 1059.749424][ T2407] [ 1059.752385][ T2407] dump_stack_lvl+0x1e7/0x2d0 [ 1059.757112][ T2407] ? tcp_gro_dev_warn+0x260/0x260 [ 1059.762180][ T2407] ? panic+0x850/0x850 [ 1059.766308][ T2407] ? stack_depot_save_flags+0x1fa/0x650 [ 1059.771905][ T2407] should_fail_ex+0x3aa/0x4e0 [ 1059.776640][ T2407] prepare_alloc_pages+0x1d9/0x5b0 [ 1059.781807][ T2407] __alloc_pages+0x165/0x680 [ 1059.786450][ T2407] ? zone_statistics+0x170/0x170 [ 1059.791445][ T2407] ? __asan_memset+0x23/0x40 [ 1059.796075][ T2407] __kmalloc_large_node+0x91/0x1d0 [ 1059.801236][ T2407] ? io_alloc_hash_table+0x3a/0xb0 [ 1059.806392][ T2407] __kmalloc+0x317/0x490 [ 1059.810681][ T2407] ? io_ring_ctx_alloc+0x54/0xb50 [ 1059.815760][ T2407] io_alloc_hash_table+0x3a/0xb0 [ 1059.820746][ T2407] io_ring_ctx_alloc+0x133/0xb50 [ 1059.825762][ T2407] io_uring_create+0x2ca/0x12f0 [ 1059.830670][ T2407] ? __might_fault+0xc1/0x120 [ 1059.835396][ T2407] __se_sys_io_uring_setup+0x2b6/0x330 [ 1059.840889][ T2407] ? __x64_sys_io_uring_setup+0x60/0x60 [ 1059.846487][ T2407] ? do_syscall_64+0x102/0x230 [ 1059.851289][ T2407] ? do_syscall_64+0xb4/0x230 [ 1059.856005][ T2407] do_syscall_64+0xf5/0x230 [ 1059.860553][ T2407] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1059.866493][ T2407] RIP: 0033:0x7f0ea367cda9 08:00:07 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) connect$nfc_llcp(r0, &(0x7f0000002840)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) [ 1059.870944][ T2407] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1059.890759][ T2407] RSP: 002b:00007f0ea441a058 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1059.899226][ T2407] RAX: ffffffffffffffda RBX: 00007f0ea37abf80 RCX: 00007f0ea367cda9 [ 1059.907237][ T2407] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000005cab [ 1059.915243][ T2407] RBP: 00007f0ea441a120 R08: 0000000000000000 R09: 0000000000000000 [ 1059.923256][ T2407] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1059.931266][ T2407] R13: 0000000000000000 R14: 0000000000005cab R15: 0000000000000000 [ 1059.939295][ T2407] [ 1059.942345][ T2409] CPU: 0 PID: 2409 Comm: syz-executor.3 Not tainted 6.7.0-syzkaller-10085-g1b1934dbbdcf #0 [ 1059.952364][ T2409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1059.962453][ T2409] Call Trace: [ 1059.965742][ T2409] [ 1059.968676][ T2409] dump_stack_lvl+0x1e7/0x2d0 [ 1059.973372][ T2409] ? tcp_gro_dev_warn+0x260/0x260 [ 1059.978425][ T2409] ? panic+0x850/0x850 [ 1059.982516][ T2409] should_fail_ex+0x3aa/0x4e0 [ 1059.987221][ T2409] prepare_alloc_pages+0x1d9/0x5b0 [ 1059.992350][ T2409] __alloc_pages+0x165/0x680 [ 1059.996954][ T2409] ? zone_statistics+0x170/0x170 [ 1060.001908][ T2409] ? lockdep_init_map_type+0xa1/0x900 [ 1060.007294][ T2409] ? lockdep_softirqs_off+0x430/0x430 [ 1060.012808][ T2409] ? __phys_addr+0xba/0x170 [ 1060.017347][ T2409] __kmalloc_large_node+0x91/0x1d0 [ 1060.022485][ T2409] ? io_alloc_hash_table+0x3a/0xb0 [ 1060.027633][ T2409] __kmalloc+0x317/0x490 [ 1060.031903][ T2409] io_alloc_hash_table+0x3a/0xb0 [ 1060.036858][ T2409] io_ring_ctx_alloc+0x166/0xb50 [ 1060.041819][ T2409] io_uring_create+0x2ca/0x12f0 [ 1060.046686][ T2409] ? __might_fault+0xc1/0x120 [ 1060.051375][ T2409] __se_sys_io_uring_setup+0x2b6/0x330 [ 1060.056854][ T2409] ? __x64_sys_io_uring_setup+0x60/0x60 [ 1060.062422][ T2409] ? do_syscall_64+0x102/0x230 [ 1060.067211][ T2409] ? do_syscall_64+0xb4/0x230 [ 1060.071919][ T2409] do_syscall_64+0xf5/0x230 [ 1060.076454][ T2409] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1060.082379][ T2409] RIP: 0033:0x7fe43ae7cda9 [ 1060.086823][ T2409] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1060.106444][ T2409] RSP: 002b:00007fe43bb28058 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1060.114868][ T2409] RAX: ffffffffffffffda RBX: 00007fe43afabf80 RCX: 00007fe43ae7cda9 [ 1060.122868][ T2409] RDX: 0000000020000280 RSI: 00000000200001c0 RDI: 0000000000004ec8 [ 1060.130846][ T2409] RBP: 00007fe43bb28120 R08: 0000000000000000 R09: 0000000020000280 [ 1060.138824][ T2409] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200001c0 [ 1060.146800][ T2409] R13: 0000000020000240 R14: 0000000000004ec8 R15: 0000000020000280 [ 1060.154810][ T2409] 08:00:07 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) 08:00:07 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, 0x0) 08:00:07 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) connect$nfc_llcp(r0, &(0x7f0000002840)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 08:00:07 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x2, &(0x7f0000000340)) 08:00:08 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) 08:00:08 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x0, 0x0) (fail_nth: 4) 08:00:08 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) (fail_nth: 6) 08:00:08 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, 0x0) (fail_nth: 1) 08:00:08 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x10, &(0x7f0000000340)) 08:00:08 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000002840)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 08:00:08 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) [ 1060.514727][ T2430] FAULT_INJECTION: forcing a failure. [ 1060.514727][ T2430] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1060.574567][ T2434] FAULT_INJECTION: forcing a failure. [ 1060.574567][ T2434] name failslab, interval 1, probability 0, space 0, times 0 [ 1060.576461][ T2430] CPU: 1 PID: 2430 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-10085-g1b1934dbbdcf #0 [ 1060.597205][ T2430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1060.607292][ T2430] Call Trace: [ 1060.610609][ T2430] [ 1060.613569][ T2430] dump_stack_lvl+0x1e7/0x2d0 [ 1060.618293][ T2430] ? tcp_gro_dev_warn+0x260/0x260 [ 1060.623361][ T2430] ? panic+0x850/0x850 [ 1060.627492][ T2430] should_fail_ex+0x3aa/0x4e0 [ 1060.632233][ T2430] prepare_alloc_pages+0x1d9/0x5b0 [ 1060.637396][ T2430] __alloc_pages+0x165/0x680 [ 1060.642030][ T2430] ? zone_statistics+0x170/0x170 [ 1060.647015][ T2430] ? lockdep_init_map_type+0xa1/0x900 [ 1060.652437][ T2430] ? lockdep_softirqs_off+0x430/0x430 [ 1060.657939][ T2430] ? __phys_addr+0xba/0x170 [ 1060.662485][ T2430] __kmalloc_large_node+0x91/0x1d0 [ 1060.667637][ T2430] ? io_alloc_hash_table+0x3a/0xb0 [ 1060.672777][ T2430] __kmalloc+0x317/0x490 [ 1060.677070][ T2430] io_alloc_hash_table+0x3a/0xb0 [ 1060.682050][ T2430] io_ring_ctx_alloc+0x166/0xb50 [ 1060.687070][ T2430] io_uring_create+0x2ca/0x12f0 [ 1060.691967][ T2430] ? __might_fault+0xc1/0x120 [ 1060.696694][ T2430] __se_sys_io_uring_setup+0x2b6/0x330 [ 1060.702200][ T2430] ? __x64_sys_io_uring_setup+0x60/0x60 [ 1060.707784][ T2430] ? xfd_validate_state+0x6e/0x150 [ 1060.712949][ T2430] ? print_irqtrace_events+0x220/0x220 [ 1060.718455][ T2430] ? do_syscall_64+0xb4/0x230 08:00:08 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x541b, &(0x7f0000000340)) 08:00:08 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000002840)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) 08:00:08 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x5421, &(0x7f0000000340)) [ 1060.723179][ T2430] do_syscall_64+0xf5/0x230 [ 1060.727745][ T2430] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1060.733685][ T2430] RIP: 0033:0x7f0ea367cda9 [ 1060.738134][ T2430] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1060.757799][ T2430] RSP: 002b:00007f0ea441a058 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1060.766269][ T2430] RAX: ffffffffffffffda RBX: 00007f0ea37abf80 RCX: 00007f0ea367cda9 08:00:08 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000002840)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) [ 1060.774287][ T2430] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000005cab [ 1060.782301][ T2430] RBP: 00007f0ea441a120 R08: 0000000000000000 R09: 0000000000000000 [ 1060.790310][ T2430] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1060.798314][ T2430] R13: 0000000000000000 R14: 0000000000005cab R15: 0000000000000000 [ 1060.806330][ T2430] [ 1060.817643][ T2434] CPU: 0 PID: 2434 Comm: syz-executor.5 Not tainted 6.7.0-syzkaller-10085-g1b1934dbbdcf #0 [ 1060.827679][ T2434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1060.837768][ T2434] Call Trace: [ 1060.841087][ T2434] [ 1060.844059][ T2434] dump_stack_lvl+0x1e7/0x2d0 [ 1060.848785][ T2434] ? tcp_gro_dev_warn+0x260/0x260 [ 1060.853851][ T2434] ? panic+0x850/0x850 [ 1060.857951][ T2434] ? __might_sleep+0xe0/0xe0 [ 1060.862569][ T2434] should_fail_ex+0x3aa/0x4e0 [ 1060.867273][ T2434] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1060.873017][ T2434] should_failslab+0x9/0x20 [ 1060.877546][ T2434] __kmalloc+0xe6/0x490 [ 1060.881734][ T2434] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 1060.887489][ T2434] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1060.893074][ T2434] tomoyo_path_number_perm+0x23a/0x870 [ 1060.898556][ T2434] ? tomoyo_path_number_perm+0x208/0x870 [ 1060.904211][ T2434] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1060.909706][ T2434] ? read_lock_is_recursive+0x20/0x20 [ 1060.915119][ T2434] ? __fget_files+0x28/0x470 [ 1060.919811][ T2434] ? __fget_files+0x3f4/0x470 [ 1060.924496][ T2434] ? __fget_files+0x28/0x470 [ 1060.929106][ T2434] security_file_ioctl+0x71/0xa0 [ 1060.934067][ T2434] __se_sys_ioctl+0x47/0x170 [ 1060.938668][ T2434] do_syscall_64+0xf5/0x230 [ 1060.943206][ T2434] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1060.949311][ T2434] RIP: 0033:0x7fcdbc27cda9 [ 1060.953744][ T2434] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1060.973374][ T2434] RSP: 002b:00007fcdbd09b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1060.981912][ T2434] RAX: ffffffffffffffda RBX: 00007fcdbc3abf80 RCX: 00007fcdbc27cda9 [ 1060.989901][ T2434] RDX: 0000000000000000 RSI: 00000000c058671e RDI: 0000000000000003 [ 1060.997885][ T2434] RBP: 00007fcdbd09b120 R08: 0000000000000000 R09: 0000000000000000 [ 1061.005867][ T2434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1061.013845][ T2434] R13: 000000000000000b R14: 00007fcdbc3abf80 R15: 00007fffefcfe0e8 [ 1061.021844][ T2434] 08:00:08 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) (fail_nth: 7) 08:00:08 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) 08:00:08 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, 0x0, 0x0) 08:00:08 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, 0x0) (fail_nth: 2) 08:00:08 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x5450, &(0x7f0000000340)) [ 1061.135422][ T2434] ERROR: Out of memory at tomoyo_realpath_from_path. 08:00:08 executing program 4: bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 08:00:08 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x0, 0x0) (fail_nth: 5) 08:00:08 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, 0x0, 0x0) 08:00:08 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) (fail_nth: 8) [ 1061.297411][ T2458] FAULT_INJECTION: forcing a failure. [ 1061.297411][ T2458] name failslab, interval 1, probability 0, space 0, times 0 [ 1061.333438][ T2458] CPU: 1 PID: 2458 Comm: syz-executor.5 Not tainted 6.7.0-syzkaller-10085-g1b1934dbbdcf #0 [ 1061.343493][ T2458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1061.353590][ T2458] Call Trace: [ 1061.356904][ T2458] [ 1061.359866][ T2458] dump_stack_lvl+0x1e7/0x2d0 [ 1061.364588][ T2458] ? tcp_gro_dev_warn+0x260/0x260 [ 1061.369650][ T2458] ? panic+0x850/0x850 [ 1061.373762][ T2458] ? __might_sleep+0xe0/0xe0 [ 1061.378403][ T2458] ? dynamic_dname+0x141/0x1b0 [ 1061.383223][ T2458] should_fail_ex+0x3aa/0x4e0 [ 1061.388092][ T2458] ? tomoyo_encode+0x26f/0x530 [ 1061.392911][ T2458] should_failslab+0x9/0x20 08:00:09 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x5451, &(0x7f0000000340)) [ 1061.397463][ T2458] __kmalloc+0xe6/0x490 [ 1061.401686][ T2458] tomoyo_encode+0x26f/0x530 [ 1061.406328][ T2458] ? sock_free_inode+0x30/0x30 [ 1061.411137][ T2458] tomoyo_realpath_from_path+0x598/0x5e0 [ 1061.416845][ T2458] tomoyo_path_number_perm+0x23a/0x870 [ 1061.422361][ T2458] ? tomoyo_path_number_perm+0x208/0x870 [ 1061.428046][ T2458] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1061.433573][ T2458] ? read_lock_is_recursive+0x20/0x20 [ 1061.439019][ T2458] ? __fget_files+0x28/0x470 [ 1061.443657][ T2458] ? __fget_files+0x3f4/0x470 [ 1061.448375][ T2458] ? __fget_files+0x28/0x470 [ 1061.453012][ T2458] security_file_ioctl+0x71/0xa0 [ 1061.458001][ T2458] __se_sys_ioctl+0x47/0x170 [ 1061.462642][ T2458] do_syscall_64+0xf5/0x230 [ 1061.467213][ T2458] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1061.473174][ T2458] RIP: 0033:0x7fcdbc27cda9 [ 1061.475834][ T2467] FAULT_INJECTION: forcing a failure. [ 1061.475834][ T2467] name failslab, interval 1, probability 0, space 0, times 0 08:00:09 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, 0x0, 0x0) [ 1061.477601][ T2458] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1061.477622][ T2458] RSP: 002b:00007fcdbd09b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1061.477647][ T2458] RAX: ffffffffffffffda RBX: 00007fcdbc3abf80 RCX: 00007fcdbc27cda9 [ 1061.526281][ T2458] RDX: 0000000000000000 RSI: 00000000c058671e RDI: 0000000000000003 [ 1061.534290][ T2458] RBP: 00007fcdbd09b120 R08: 0000000000000000 R09: 0000000000000000 [ 1061.542381][ T2458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1061.550378][ T2458] R13: 000000000000000b R14: 00007fcdbc3abf80 R15: 00007fffefcfe0e8 [ 1061.558393][ T2458] [ 1061.563229][ T2467] CPU: 0 PID: 2467 Comm: syz-executor.3 Not tainted 6.7.0-syzkaller-10085-g1b1934dbbdcf #0 [ 1061.573275][ T2467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1061.583372][ T2467] Call Trace: [ 1061.586664][ T2467] [ 1061.589592][ T2467] dump_stack_lvl+0x1e7/0x2d0 [ 1061.594285][ T2467] ? tcp_gro_dev_warn+0x260/0x260 [ 1061.599316][ T2467] ? panic+0x850/0x850 [ 1061.603406][ T2467] ? __might_sleep+0xe0/0xe0 [ 1061.608014][ T2467] ? alloc_pages_mpol+0x40c/0x640 [ 1061.613069][ T2467] should_fail_ex+0x3aa/0x4e0 [ 1061.617765][ T2467] ? io_rsrc_node_alloc+0x103/0x1c0 [ 1061.622971][ T2467] should_failslab+0x9/0x20 [ 1061.627509][ T2467] kmalloc_trace+0x76/0x360 [ 1061.632032][ T2467] ? __get_free_pages+0xc/0x30 [ 1061.636827][ T2467] io_rsrc_node_alloc+0x103/0x1c0 [ 1061.641883][ T2467] io_uring_create+0x775/0x12f0 [ 1061.646766][ T2467] __se_sys_io_uring_setup+0x2b6/0x330 [ 1061.652246][ T2467] ? __x64_sys_io_uring_setup+0x60/0x60 [ 1061.657815][ T2467] ? do_syscall_64+0x102/0x230 [ 1061.662599][ T2467] ? do_syscall_64+0xb4/0x230 [ 1061.667301][ T2467] do_syscall_64+0xf5/0x230 [ 1061.671908][ T2467] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1061.677822][ T2467] RIP: 0033:0x7fe43ae7cda9 [ 1061.682258][ T2467] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1061.701892][ T2467] RSP: 002b:00007fe43bb28058 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1061.710324][ T2467] RAX: ffffffffffffffda RBX: 00007fe43afabf80 RCX: 00007fe43ae7cda9 [ 1061.718302][ T2467] RDX: 0000000020000280 RSI: 00000000200001c0 RDI: 0000000000004ec8 [ 1061.726273][ T2467] RBP: 00007fe43bb28120 R08: 0000000000000000 R09: 0000000020000280 [ 1061.734333][ T2467] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200001c0 [ 1061.742309][ T2467] R13: 0000000020000240 R14: 0000000000004ec8 R15: 0000000020000280 [ 1061.750310][ T2467] 08:00:09 executing program 4: bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 08:00:09 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x5452, &(0x7f0000000340)) 08:00:09 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, &(0x7f0000002840)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) [ 1061.840964][ T2472] FAULT_INJECTION: forcing a failure. [ 1061.840964][ T2472] name failslab, interval 1, probability 0, space 0, times 0 [ 1061.875176][ T2458] ERROR: Out of memory at tomoyo_realpath_from_path. 08:00:09 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) (fail_nth: 9) 08:00:09 executing program 4: bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) [ 1061.931713][ T2472] CPU: 0 PID: 2472 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-10085-g1b1934dbbdcf #0 [ 1061.941765][ T2472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1061.951861][ T2472] Call Trace: [ 1061.955172][ T2472] [ 1061.958132][ T2472] dump_stack_lvl+0x1e7/0x2d0 [ 1061.962875][ T2472] ? tcp_gro_dev_warn+0x260/0x260 [ 1061.967936][ T2472] ? panic+0x850/0x850 [ 1061.972027][ T2472] ? __might_sleep+0xe0/0xe0 [ 1061.976658][ T2472] should_fail_ex+0x3aa/0x4e0 [ 1061.981357][ T2472] ? io_allocate_scq_urings+0x6a0/0x6a0 [ 1061.986915][ T2472] ? percpu_ref_init+0xbd/0x360 [ 1061.991776][ T2472] should_failslab+0x9/0x20 [ 1061.996385][ T2472] kmalloc_trace+0x76/0x360 [ 1062.000917][ T2472] ? io_allocate_scq_urings+0x6a0/0x6a0 [ 1062.006504][ T2472] percpu_ref_init+0xbd/0x360 [ 1062.011199][ T2472] io_ring_ctx_alloc+0x235/0xb50 [ 1062.016158][ T2472] io_uring_create+0x2ca/0x12f0 [ 1062.021030][ T2472] ? __might_fault+0xc1/0x120 [ 1062.025742][ T2472] __se_sys_io_uring_setup+0x2b6/0x330 [ 1062.031204][ T2472] ? __x64_sys_io_uring_setup+0x60/0x60 [ 1062.036766][ T2472] ? do_syscall_64+0x102/0x230 [ 1062.041534][ T2472] ? do_syscall_64+0xb4/0x230 [ 1062.046214][ T2472] do_syscall_64+0xf5/0x230 [ 1062.050721][ T2472] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1062.056660][ T2472] RIP: 0033:0x7f0ea367cda9 [ 1062.061101][ T2472] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1062.080728][ T2472] RSP: 002b:00007f0ea441a058 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1062.089170][ T2472] RAX: ffffffffffffffda RBX: 00007f0ea37abf80 RCX: 00007f0ea367cda9 [ 1062.097152][ T2472] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000005cab [ 1062.105144][ T2472] RBP: 00007f0ea441a120 R08: 0000000000000000 R09: 0000000000000000 [ 1062.113266][ T2472] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1062.121244][ T2472] R13: 0000000000000000 R14: 0000000000005cab R15: 0000000000000000 [ 1062.129233][ T2472] [ 1062.155374][ T2479] FAULT_INJECTION: forcing a failure. [ 1062.155374][ T2479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1062.168619][ T2479] CPU: 1 PID: 2479 Comm: syz-executor.3 Not tainted 6.7.0-syzkaller-10085-g1b1934dbbdcf #0 [ 1062.178644][ T2479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1062.188735][ T2479] Call Trace: [ 1062.192040][ T2479] [ 1062.194992][ T2479] dump_stack_lvl+0x1e7/0x2d0 [ 1062.199714][ T2479] ? tcp_gro_dev_warn+0x260/0x260 [ 1062.204862][ T2479] ? panic+0x850/0x850 [ 1062.208973][ T2479] ? __lock_acquire+0x1fd0/0x1fd0 [ 1062.214050][ T2479] ? io_rsrc_node_alloc+0x103/0x1c0 [ 1062.219303][ T2479] should_fail_ex+0x3aa/0x4e0 [ 1062.224046][ T2479] _copy_to_user+0x2f/0xa0 [ 1062.228515][ T2479] io_uring_create+0xaea/0x12f0 [ 1062.233433][ T2479] __se_sys_io_uring_setup+0x2b6/0x330 [ 1062.238942][ T2479] ? __x64_sys_io_uring_setup+0x60/0x60 [ 1062.244546][ T2479] ? do_syscall_64+0x102/0x230 [ 1062.249353][ T2479] ? do_syscall_64+0xb4/0x230 [ 1062.254068][ T2479] do_syscall_64+0xf5/0x230 [ 1062.258642][ T2479] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1062.264600][ T2479] RIP: 0033:0x7fe43ae7cda9 [ 1062.269048][ T2479] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1062.288686][ T2479] RSP: 002b:00007fe43bb28058 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1062.297139][ T2479] RAX: ffffffffffffffda RBX: 00007fe43afabf80 RCX: 00007fe43ae7cda9 08:00:09 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x0, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) 08:00:09 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, 0x0) (fail_nth: 3) 08:00:09 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, &(0x7f0000002840)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, "5e98854b84965dd7f54d59d276328a7aff5c1fa06ba5b7b89eb568593994e3adf8bc9fbc8c178daba40bbb09f3c1742ea07600daf0d314386144b638544053"}, 0x60) [ 1062.305142][ T2479] RDX: 0000000020000280 RSI: 00000000200001c0 RDI: 0000000000004ec8 [ 1062.313149][ T2479] RBP: 00007fe43bb28120 R08: 0000000000000000 R09: 0000000020000280 [ 1062.321164][ T2479] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200001c0 [ 1062.329158][ T2479] R13: 0000000020000240 R14: 0000000000004ec8 R15: 0000000020000280 [ 1062.337244][ T2479] 08:00:10 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x5460, &(0x7f0000000340)) 08:00:10 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x0, 0x0) (fail_nth: 6) [ 1062.423142][ T2486] FAULT_INJECTION: forcing a failure. [ 1062.423142][ T2486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1062.455184][ T2486] CPU: 1 PID: 2486 Comm: syz-executor.5 Not tainted 6.7.0-syzkaller-10085-g1b1934dbbdcf #0 [ 1062.465321][ T2486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1062.475432][ T2486] Call Trace: [ 1062.478761][ T2486] [ 1062.481726][ T2486] dump_stack_lvl+0x1e7/0x2d0 [ 1062.486454][ T2486] ? tcp_gro_dev_warn+0x260/0x260 [ 1062.491528][ T2486] ? panic+0x850/0x850 [ 1062.495652][ T2486] ? snprintf+0xda/0x120 [ 1062.499950][ T2486] should_fail_ex+0x3aa/0x4e0 [ 1062.504688][ T2486] _copy_to_user+0x2f/0xa0 [ 1062.509148][ T2486] simple_read_from_buffer+0xca/0x150 [ 1062.514568][ T2486] proc_fail_nth_read+0x1e9/0x250 [ 1062.519666][ T2486] ? proc_fault_inject_write+0x3c0/0x3c0 [ 1062.525363][ T2486] ? rw_verify_area+0x402/0x570 [ 1062.530251][ T2486] ? proc_fault_inject_write+0x3c0/0x3c0 [ 1062.535935][ T2486] vfs_read+0x207/0x900 [ 1062.540147][ T2486] ? kernel_read+0x70/0x70 [ 1062.544657][ T2486] ? __fget_files+0x3f4/0x470 [ 1062.549368][ T2486] ? __fget_files+0x28/0x470 [ 1062.553998][ T2486] ? __fdget_pos+0x258/0x320 [ 1062.558640][ T2486] ksys_read+0x1a0/0x2c0 [ 1062.562935][ T2486] ? vfs_write+0xaf0/0xaf0 [ 1062.567386][ T2486] ? do_syscall_64+0x102/0x230 [ 1062.572170][ T2486] ? do_syscall_64+0xb4/0x230 [ 1062.576859][ T2486] do_syscall_64+0xf5/0x230 [ 1062.581369][ T2486] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1062.587273][ T2486] RIP: 0033:0x7fcdbc27ba4c [ 1062.591697][ T2486] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 1062.611314][ T2486] RSP: 002b:00007fcdbd09b0c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1062.619748][ T2486] RAX: ffffffffffffffda RBX: 00007fcdbc3abf80 RCX: 00007fcdbc27ba4c [ 1062.627734][ T2486] RDX: 000000000000000f RSI: 00007fcdbd09b130 RDI: 0000000000000004 [ 1062.635731][ T2486] RBP: 00007fcdbd09b120 R08: 0000000000000000 R09: 0000000000000000 [ 1062.643720][ T2486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1062.651696][ T2486] R13: 000000000000000b R14: 00007fcdbc3abf80 R15: 00007fffefcfe0e8 [ 1062.659690][ T2486] 08:00:10 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x8933, &(0x7f0000000340)) 08:00:10 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x0, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) 08:00:10 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x5460, &(0x7f0000000340)) 08:00:10 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x0, 0x0) (fail_nth: 7) 08:00:10 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) (fail_nth: 10) [ 1062.868276][ T2500] FAULT_INJECTION: forcing a failure. [ 1062.868276][ T2500] name failslab, interval 1, probability 0, space 0, times 0 [ 1062.901948][ T2500] CPU: 1 PID: 2500 Comm: syz-executor.3 Not tainted 6.7.0-syzkaller-10085-g1b1934dbbdcf #0 [ 1062.912001][ T2500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1062.922115][ T2500] Call Trace: [ 1062.925437][ T2500] [ 1062.928403][ T2500] dump_stack_lvl+0x1e7/0x2d0 [ 1062.933121][ T2500] ? tcp_gro_dev_warn+0x260/0x260 [ 1062.938177][ T2500] ? panic+0x850/0x850 [ 1062.942291][ T2500] should_fail_ex+0x3aa/0x4e0 [ 1062.947015][ T2500] ? new_inode_pseudo+0x85/0x1d0 [ 1062.951970][ T2500] should_failslab+0x9/0x20 [ 1062.956503][ T2500] kmem_cache_alloc_lru+0x7a/0x340 [ 1062.961640][ T2500] new_inode_pseudo+0x85/0x1d0 [ 1062.966417][ T2500] alloc_anon_inode+0x1f/0x300 [ 1062.971189][ T2500] __anon_inode_getfile+0x1a1/0x3c0 [ 1062.976404][ T2500] ? anon_inode_getfile+0x180/0x180 [ 1062.981610][ T2500] ? __might_fault+0xc1/0x120 [ 1062.986337][ T2500] io_uring_create+0xb8f/0x12f0 [ 1062.991249][ T2500] __se_sys_io_uring_setup+0x2b6/0x330 [ 1062.996732][ T2500] ? __x64_sys_io_uring_setup+0x60/0x60 [ 1063.002315][ T2500] ? do_syscall_64+0x102/0x230 [ 1063.007113][ T2500] ? do_syscall_64+0xb4/0x230 [ 1063.011917][ T2500] do_syscall_64+0xf5/0x230 [ 1063.016455][ T2500] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1063.022378][ T2500] RIP: 0033:0x7fe43ae7cda9 [ 1063.026808][ T2500] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1063.046434][ T2500] RSP: 002b:00007fe43bb28058 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1063.054859][ T2500] RAX: ffffffffffffffda RBX: 00007fe43afabf80 RCX: 00007fe43ae7cda9 08:00:10 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, 0x0) 08:00:10 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x400448c9, &(0x7f0000000340)) 08:00:10 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x5460, &(0x7f0000000340)) [ 1063.062838][ T2500] RDX: 0000000020000280 RSI: 00000000200001c0 RDI: 0000000000004ec8 [ 1063.070819][ T2500] RBP: 00007fe43bb28120 R08: 0000000000000000 R09: 0000000020000280 [ 1063.078795][ T2500] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200001c0 [ 1063.086795][ T2500] R13: 0000000020000240 R14: 0000000000004ec8 R15: 0000000020000280 [ 1063.094800][ T2500] 08:00:10 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x0, 0x1, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) 08:00:10 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x0, 0x0) (fail_nth: 8) 08:00:10 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:10 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x2, 0x0) 08:00:10 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x400448dd, &(0x7f0000000340)) 08:00:10 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x0, 0x40, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) 08:00:10 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x5460, &(0x7f0000000340)) [ 1063.366523][ T2513] FAULT_INJECTION: forcing a failure. [ 1063.366523][ T2513] name failslab, interval 1, probability 0, space 0, times 0 [ 1063.379604][ T2513] CPU: 0 PID: 2513 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-10085-g1b1934dbbdcf #0 [ 1063.389629][ T2513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1063.399724][ T2513] Call Trace: [ 1063.403039][ T2513] [ 1063.406004][ T2513] dump_stack_lvl+0x1e7/0x2d0 [ 1063.410729][ T2513] ? tcp_gro_dev_warn+0x260/0x260 [ 1063.415812][ T2513] ? panic+0x850/0x850 [ 1063.419926][ T2513] ? read_lock_is_recursive+0x20/0x20 [ 1063.425356][ T2513] ? __sigqueue_alloc+0x2f/0x540 [ 1063.430331][ T2513] should_fail_ex+0x3aa/0x4e0 [ 1063.435066][ T2513] ? __sigqueue_alloc+0x42e/0x540 [ 1063.440158][ T2513] should_failslab+0x9/0x20 [ 1063.444677][ T2513] kmem_cache_alloc+0x77/0x340 [ 1063.449467][ T2513] __sigqueue_alloc+0x42e/0x540 [ 1063.454340][ T2513] __send_signal_locked+0x22f/0xdc0 [ 1063.459585][ T2513] force_sig_info_to_task+0x2ff/0x580 [ 1063.464980][ T2513] force_sig_fault+0x12b/0x1d0 [ 1063.469761][ T2513] ? force_sig_fault_to_task+0x1c0/0x1c0 [ 1063.475415][ T2513] ? page_fault_oops+0xaa0/0xaa0 [ 1063.480542][ T2513] ? lock_mm_and_find_vma+0xf4/0x2d0 [ 1063.485843][ T2513] __bad_area_nosemaphore+0x3db/0x740 [ 1063.491235][ T2513] ? spurious_kernel_fault_check+0x130/0x130 [ 1063.497316][ T2513] ? lock_mm_and_find_vma+0xf4/0x2d0 [ 1063.502614][ T2513] exc_page_fault+0x35b/0x870 [ 1063.507313][ T2513] asm_exc_page_fault+0x26/0x30 [ 1063.512179][ T2513] RIP: 0033:0x7f0ea3626f6a [ 1063.516603][ T2513] Code: 24 04 ba 03 00 00 00 c1 e0 04 41 03 44 24 64 39 c6 48 0f 42 f0 45 31 c9 31 ff e8 71 5e 05 00 41 8b 34 24 ba 03 00 00 00 31 ff <49> 89 45 00 41 b9 00 00 00 10 41 89 e8 b9 01 80 00 00 c1 e6 06 e8 [ 1063.536225][ T2513] RSP: 002b:00007f0ea441a060 EFLAGS: 00010246 [ 1063.542341][ T2513] RAX: ffffffffffffffff RBX: 00007f0ea37abf80 RCX: 00007f0ea367cde3 [ 1063.550323][ T2513] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 1063.558313][ T2513] RBP: ffffffffffffffff R08: 00000000ffffffff R09: 0000000000000000 [ 1063.566301][ T2513] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000020000000 [ 1063.574273][ T2513] R13: 0000000000000000 R14: 0000000000005cab R15: 0000000000000000 [ 1063.582265][ T2513] 08:00:11 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x0, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:11 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x400454ca, &(0x7f0000000340)) 08:00:11 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x2, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:11 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x10, 0x0) 08:00:11 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x0, 0x0) (fail_nth: 9) 08:00:11 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x40049409, &(0x7f0000000340)) 08:00:11 executing program 1: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0x5460, &(0x7f0000000340)) 08:00:11 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x0, 0x0, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) [ 1063.901285][ T2533] FAULT_INJECTION: forcing a failure. [ 1063.901285][ T2533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1063.949471][ T2533] CPU: 1 PID: 2533 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-10085-g1b1934dbbdcf #0 [ 1063.959534][ T2533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1063.969623][ T2533] Call Trace: [ 1063.972936][ T2533] [ 1063.975914][ T2533] dump_stack_lvl+0x1e7/0x2d0 [ 1063.980662][ T2533] ? tcp_gro_dev_warn+0x260/0x260 [ 1063.985729][ T2533] ? panic+0x850/0x850 [ 1063.989868][ T2533] ? __lock_acquire+0x1fd0/0x1fd0 [ 1063.994934][ T2533] ? __local_bh_enable_ip+0x168/0x1f0 [ 1064.000351][ T2533] ? copy_fpstate_to_sigframe+0x174/0xd70 [ 1064.006125][ T2533] should_fail_ex+0x3aa/0x4e0 [ 1064.010838][ T2533] copy_fpstate_to_sigframe+0xa61/0xd70 [ 1064.016426][ T2533] ? get_signal+0xbe1/0x1840 [ 1064.021099][ T2533] ? fpregs_set+0x760/0x760 [ 1064.025667][ T2533] ? fpu__alloc_mathframe+0xaa/0x130 [ 1064.030992][ T2533] get_sigframe+0x560/0x6e0 [ 1064.035586][ T2533] ? mmap_write_unlock+0x160/0x160 [ 1064.040762][ T2533] x64_setup_rt_frame+0x17e/0xc30 [ 1064.045852][ T2533] ? sigaltstack_size_valid+0x200/0x200 [ 1064.051438][ T2533] ? force_sig_fault_to_task+0x1c0/0x1c0 [ 1064.057118][ T2533] arch_do_signal_or_restart+0x457/0x860 [ 1064.062773][ T2533] ? get_sigframe_size+0x20/0x20 [ 1064.067746][ T2533] ? irqentry_exit_to_user_mode+0x52/0x280 [ 1064.073582][ T2533] irqentry_exit_to_user_mode+0x78/0x280 [ 1064.079229][ T2533] exc_page_fault+0x587/0x870 [ 1064.084101][ T2533] asm_exc_page_fault+0x26/0x30 [ 1064.088962][ T2533] RIP: 0033:0x7f0ea3626f6a [ 1064.093382][ T2533] Code: 24 04 ba 03 00 00 00 c1 e0 04 41 03 44 24 64 39 c6 48 0f 42 f0 45 31 c9 31 ff e8 71 5e 05 00 41 8b 34 24 ba 03 00 00 00 31 ff <49> 89 45 00 41 b9 00 00 00 10 41 89 e8 b9 01 80 00 00 c1 e6 06 e8 [ 1064.113024][ T2533] RSP: 002b:00007f0ea441a060 EFLAGS: 00010246 [ 1064.119114][ T2533] RAX: ffffffffffffffff RBX: 00007f0ea37abf80 RCX: 00007f0ea367cde3 [ 1064.127095][ T2533] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 1064.135067][ T2533] RBP: ffffffffffffffff R08: 00000000ffffffff R09: 0000000000000000 [ 1064.143046][ T2533] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000020000000 [ 1064.151125][ T2533] R13: 0000000000000000 R14: 0000000000005cab R15: 0000000000000000 [ 1064.159129][ T2533] 08:00:11 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x40086602, &(0x7f0000000340)) 08:00:11 executing program 1: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0x5460, &(0x7f0000000340)) 08:00:11 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x3, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:11 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) 08:00:11 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x5411, 0x0) 08:00:11 executing program 1: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0x5460, &(0x7f0000000340)) 08:00:11 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x40186366, &(0x7f0000000340)) 08:00:12 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x541b, 0x0) 08:00:12 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x5460, &(0x7f0000000340)) 08:00:12 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x4, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:12 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) 08:00:12 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x401c5820, &(0x7f0000000340)) 08:00:12 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x5421, 0x0) 08:00:12 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x0, 0x0]}, 0x40) 08:00:12 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x5460, &(0x7f0000000340)) 08:00:12 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x5, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:12 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x4020940d, &(0x7f0000000340)) 08:00:12 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x5450, 0x0) 08:00:12 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x5460, &(0x7f0000000340)) 08:00:12 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 08:00:12 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x6, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:12 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x80086301, &(0x7f0000000340)) 08:00:12 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0x5460, &(0x7f0000000340)) 08:00:12 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x5451, 0x0) 08:00:12 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x4020940d, &(0x7f0000000340)) 08:00:12 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x80086601, &(0x7f0000000340)) 08:00:12 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x7, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:12 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0x5460, &(0x7f0000000340)) 08:00:14 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x0, 0x0) 08:00:14 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x4020940d, &(0x7f0000000340)) 08:00:14 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x5452, 0x0) 08:00:14 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x801c581f, &(0x7f0000000340)) 08:00:14 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x8, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:14 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0x5460, &(0x7f0000000340)) 08:00:14 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc0045878, &(0x7f0000000340)) 08:00:14 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x4020940d, &(0x7f0000000340)) 08:00:14 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x5460, 0x0) 08:00:14 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x9, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:14 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x5460, 0x0) 08:00:14 executing program 4: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0x4020940d, &(0x7f0000000340)) 08:00:14 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc0045878, &(0x7f0000000340)) 08:00:14 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8901, 0x0) 08:00:14 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xa, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:14 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc0045878, &(0x7f0000000340)) 08:00:14 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc0045878, &(0x7f0000000340)) 08:00:14 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc0189436, &(0x7f0000000340)) 08:00:14 executing program 4: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0x4020940d, &(0x7f0000000340)) 08:00:14 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8902, 0x0) 08:00:14 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xf, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:14 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc0045878, &(0x7f0000000340)) 08:00:14 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8903, 0x0) 08:00:14 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64d0, &(0x7f0000000340)) 08:00:15 executing program 4: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0x4020940d, &(0x7f0000000340)) 08:00:15 executing program 1: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc0045878, &(0x7f0000000340)) 08:00:15 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x10, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:15 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x4020940d, &(0x7f0000000340)) 08:00:15 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8904, 0x0) 08:00:15 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc020660b, &(0x7f0000000340)) 08:00:15 executing program 1: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc0045878, &(0x7f0000000340)) 08:00:15 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x0, 0x0) 08:00:15 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x4020940d, &(0x7f0000000340)) 08:00:15 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8906, 0x0) 08:00:15 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x15, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:15 executing program 1: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc0045878, &(0x7f0000000340)) 08:00:15 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x1d) 08:00:15 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x2, 0x4}, 0x0, 0x0) 08:00:15 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x4020940d, &(0x7f0000000340)) 08:00:15 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8907, 0x0) 08:00:15 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x3, 0x4}, 0x0, 0x0) 08:00:15 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x21, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:15 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x1d) 08:00:15 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc0045878, &(0x7f0000000340)) 08:00:15 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0x4020940d, &(0x7f0000000340)) 08:00:15 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x890b, 0x0) 08:00:15 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc0045878, &(0x7f0000000340)) 08:00:15 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x4, 0x4}, 0x0, 0x0) 08:00:15 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x22, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:15 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x1d) 08:00:15 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0x4020940d, &(0x7f0000000340)) 08:00:15 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x5, 0x4}, 0x0, 0x0) 08:00:16 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc0045878, &(0x7f0000000340)) 08:00:16 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x890c, 0x0) 08:00:16 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x23, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:16 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0x4020940d, &(0x7f0000000340)) 08:00:16 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 08:00:16 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc0045878, &(0x7f0000000340)) 08:00:16 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x890d, 0x0) 08:00:16 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x7, 0x4}, 0x0, 0x0) 08:00:16 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x41, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:16 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x4020940d, 0x0) 08:00:16 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc0045878, &(0x7f0000000340)) 08:00:16 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 08:00:16 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8912, 0x0) 08:00:16 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x8, 0x4}, 0x0, 0x0) 08:00:16 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x42, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:16 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x4020940d, 0x0) 08:00:16 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc0045878, &(0x7f0000000340)) 08:00:16 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 08:00:16 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8914, 0x0) 08:00:16 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc0045878, 0x0) 08:00:16 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x9, 0x4}, 0x0, 0x0) 08:00:16 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x4020940d, 0x0) 08:00:16 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x48, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:16 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}) 08:00:16 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0xe, 0x4}, 0x0, 0x0) 08:00:16 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8915, 0x0) 08:00:16 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8914, 0x0) 08:00:16 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8912, 0x0) 08:00:16 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}) (async) 08:00:16 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x60, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:17 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8914, 0x0) 08:00:17 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0xf, 0x4}, 0x0, 0x0) 08:00:17 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8916, 0x0) 08:00:17 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}) 08:00:17 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8912, 0x0) 08:00:17 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8914, 0x0) 08:00:17 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x204, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r3 = socket$isdn(0x22, 0x3, 0x24) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000480)=0x1, 0x4) write$tcp_mem(r2, &(0x7f0000000400)={0xfca0, 0x20, 0x1, 0x20, 0x7fffffff}, 0x48) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000) syz_io_uring_setup(0x6e9e, &(0x7f0000000140)={0x0, 0xb94, 0x20, 0x3, 0x76}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) read$smackfs_logging(r5, &(0x7f00000002c0), 0x14) syz_io_uring_submit(r4, 0x0, &(0x7f0000000300)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, r5, &(0x7f0000000380)={0x40000000}, r5, 0x1, 0x0, 0x1}) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$tcp_mem(r2, &(0x7f00000004c0)={0x7, 0x20, 0x80000001, 0x20, 0x8}, 0x48) ioctl$DRM_IOCTL_MODE_GETFB(r6, 0xc01c64ad, &(0x7f0000000340)) 08:00:17 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8917, 0x0) 08:00:17 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x11, 0x4}, 0x0, 0x0) 08:00:17 executing program 1: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x8914, 0x0) 08:00:17 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8912, 0x0) 08:00:17 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x300, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:17 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8918, 0x0) 08:00:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) socket$isdn(0x22, 0x3, 0x24) (async) r3 = socket$isdn(0x22, 0x3, 0x24) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000480)=0x1, 0x4) (async) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000480)=0x1, 0x4) write$tcp_mem(r2, &(0x7f0000000400)={0xfca0, 0x20, 0x1, 0x20, 0x7fffffff}, 0x48) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000) syz_io_uring_setup(0x6e9e, &(0x7f0000000140)={0x0, 0xb94, 0x20, 0x3, 0x76}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) read$smackfs_logging(r5, &(0x7f00000002c0), 0x14) syz_io_uring_submit(r4, 0x0, &(0x7f0000000300)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, r5, &(0x7f0000000380)={0x40000000}, r5, 0x1, 0x0, 0x1}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$tcp_mem(r2, &(0x7f00000004c0)={0x7, 0x20, 0x80000001, 0x20, 0x8}, 0x48) ioctl$DRM_IOCTL_MODE_GETFB(r6, 0xc01c64ad, &(0x7f0000000340)) 08:00:17 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x41, 0x4}, 0x0, 0x0) 08:00:17 executing program 4: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x8912, 0x0) 08:00:17 executing program 1: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x8914, 0x0) 08:00:17 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8919, 0x0) 08:00:17 executing program 4: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x8912, 0x0) 08:00:17 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x3d5, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) r3 = socket$isdn(0x22, 0x3, 0x24) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000480)=0x1, 0x4) (async) write$tcp_mem(r2, &(0x7f0000000400)={0xfca0, 0x20, 0x1, 0x20, 0x7fffffff}, 0x48) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000) syz_io_uring_setup(0x6e9e, &(0x7f0000000140)={0x0, 0xb94, 0x20, 0x3, 0x76}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) read$smackfs_logging(r5, &(0x7f00000002c0), 0x14) (async) syz_io_uring_submit(r4, 0x0, &(0x7f0000000300)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, r5, &(0x7f0000000380)={0x40000000}, r5, 0x1, 0x0, 0x1}) (async) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$tcp_mem(r2, &(0x7f00000004c0)={0x7, 0x20, 0x80000001, 0x20, 0x8}, 0x48) (async) ioctl$DRM_IOCTL_MODE_GETFB(r6, 0xc01c64ad, &(0x7f0000000340)) 08:00:17 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x204, 0x4}, 0x0, 0x0) 08:00:17 executing program 1: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x8914, 0x0) 08:00:17 executing program 4: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x8912, 0x0) 08:00:17 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x891a, 0x0) 08:00:17 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x402, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:17 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x300, 0x4}, 0x0, 0x0) 08:00:17 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x1, 0x1, 0x5, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, r1}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000280)={r2}) 08:00:18 executing program 4: socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x8912, 0x0) 08:00:18 executing program 1: socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x8914, 0x0) 08:00:18 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x402, 0x4}, 0x0, 0x0) 08:00:18 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x406, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:18 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x891b, 0x0) 08:00:18 executing program 4: socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x8912, 0x0) 08:00:18 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x1, 0x1, 0x5, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, r1}) (async) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000200)={0x0}) (rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000280)={r2}) 08:00:18 executing program 1: socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x8914, 0x0) 08:00:18 executing program 4: socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x8912, 0x0) 08:00:18 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x891c, 0x0) 08:00:18 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x1, 0x1, 0x5, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, r1}) (async) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000280)={r2}) 08:00:18 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x500, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:18 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x406, 0x4}, 0x0, 0x0) 08:00:18 executing program 1: socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x8914, 0x0) 08:00:18 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x891b, 0x0) 08:00:18 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8933, 0x0) 08:00:18 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={r1, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x5, r2}) 08:00:18 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x500, 0x4}, 0x0, 0x0) 08:00:18 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x600, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:18 executing program 1: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x500, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:18 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x891b, 0x0) 08:00:18 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={r1, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x5, r2}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={r1, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x5, r2}) (async) 08:00:18 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8934, 0x0) 08:00:18 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x604, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:18 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x891b, 0x0) 08:00:18 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8933, 0x0) 08:00:18 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x604, 0x4}, 0x0, 0x0) 08:00:18 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={r1, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x5, r2}) 08:00:18 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8935, 0x0) 08:00:19 executing program 4: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x891b, 0x0) 08:00:19 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x700, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:19 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x700, 0x4}, 0x0, 0x0) 08:00:19 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8933, 0x0) 08:00:19 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) r0 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x40000000000001d4, 0x4000000000000020, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000300)={r1, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x10002, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000000)={r1}) 08:00:19 executing program 4: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x891b, 0x0) 08:00:19 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8940, 0x0) 08:00:19 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x810, 0x4}, 0x0, 0x0) 08:00:19 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x900, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:19 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) (async) r0 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x40000000000001d4, 0x4000000000000020, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000180)=r2) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000300)={r1, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x10002, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000000)={r1}) 08:00:19 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8941, 0x0) 08:00:19 executing program 4: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x891b, 0x0) 08:00:19 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8933, 0x0) 08:00:19 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x900, 0x4}, 0x0, 0x0) 08:00:19 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xa00, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:19 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) r0 = syz_open_dev$dri(0x0, 0x3, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x40000000000001d4, 0x4000000000000020, 0x4, 0x3}) (rerun: 64) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000300)={r1, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) (async) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x10002, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000000)={r1}) 08:00:19 executing program 4: socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x891b, 0x0) 08:00:19 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x894c, 0x0) 08:00:19 executing program 1: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x8933, 0x0) 08:00:19 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0xe00, 0x4}, 0x0, 0x0) 08:00:19 executing program 1: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x8933, 0x0) 08:00:19 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xf00, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:19 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x9, 0x1, 0x7, 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x8, 0x4, 0x3}) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r3}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000380)={0x1, "58d3a4f8bd3aeca56b907d88d3177b8cdaa9d463f4dd268111ad5662dd10eff7", 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000400)={0x0, 0x1, r5}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, r3}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f0000000440)=r2) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x20080, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r6) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000280)={r1, 0x8001, 0x5, 0x200005e, 0x2, [], [0x0, 0x400, 0x0, 0x5328], [0x1, 0x5, 0x80000001, 0x80000000], [0x4bc0, 0x705, 0x80000000, 0x9]}) 08:00:19 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8953, 0x0) 08:00:19 executing program 4: socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x891b, 0x0) 08:00:19 executing program 1: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x8933, 0x0) 08:00:19 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x9, 0x1, 0x7, 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x8, 0x4, 0x3}) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r3}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000380)={0x1, "58d3a4f8bd3aeca56b907d88d3177b8cdaa9d463f4dd268111ad5662dd10eff7", 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000400)={0x0, 0x1, r5}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, r3}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f0000000440)=r2) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x20080, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r6) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000280)={r1, 0x8001, 0x5, 0x200005e, 0x2, [], [0x0, 0x400, 0x0, 0x5328], [0x1, 0x5, 0x80000001, 0x80000000], [0x4bc0, 0x705, 0x80000000, 0x9]}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x9, 0x1, 0x7, 0x3}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x8, 0x4, 0x3}) (async) syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000280)) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r3}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000380)={0x1, "58d3a4f8bd3aeca56b907d88d3177b8cdaa9d463f4dd268111ad5662dd10eff7"}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000400)={0x0, 0x1, r5}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, r3}) (async) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) (async) ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f0000000440)=r2) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x20080, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r6) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000280)={r1, 0x8001, 0x5, 0x200005e, 0x2, [], [0x0, 0x400, 0x0, 0x5328], [0x1, 0x5, 0x80000001, 0x80000000], [0x4bc0, 0x705, 0x80000000, 0x9]}) (async) 08:00:19 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0xf00, 0x4}, 0x0, 0x0) 08:00:19 executing program 4: socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x891b, 0x0) 08:00:19 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x1500, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:20 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x9, 0x1, 0x7, 0x3}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x8, 0x4, 0x3}) (async) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000280)) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r3}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000380)={0x1, "58d3a4f8bd3aeca56b907d88d3177b8cdaa9d463f4dd268111ad5662dd10eff7", 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000400)={0x0, 0x1, r5}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, r3}) (async) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) (async) ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f0000000440)=r2) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x20080, 0x0) (async) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r6) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000280)={r1, 0x8001, 0x5, 0x200005e, 0x2, [], [0x0, 0x400, 0x0, 0x5328], [0x1, 0x5, 0x80000001, 0x80000000], [0x4bc0, 0x705, 0x80000000, 0x9]}) 08:00:20 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8954, 0x0) 08:00:20 executing program 1: socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x8933, 0x0) 08:00:20 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1008, 0x4}, 0x0, 0x0) 08:00:20 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x1f00, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:20 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8955, 0x0) 08:00:20 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8954, 0x0) 08:00:20 executing program 1: socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x8933, 0x0) 08:00:20 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) r2 = syz_open_dev$dri(&(0x7f0000000180), 0xfc, 0x0) r3 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r5) ioctl$DRM_IOCTL_MODE_DIRTYFB(r3, 0xc01864b1, &(0x7f0000000300)={r4, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000280)={&(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0], 0x2, r4, 0xe0e0e0e0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000140)=r6) 08:00:20 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1100, 0x4}, 0x0, 0x0) 08:00:20 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8982, 0x0) 08:00:20 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x2000, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:20 executing program 1: socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x8933, 0x0) 08:00:20 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) (async) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0xfc, 0x0) (async) r3 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r5) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r3, 0xc01864b1, &(0x7f0000000300)={r4, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000280)={&(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0], 0x2, r4, 0xe0e0e0e0}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000140)=r6) 08:00:20 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8954, 0x0) 08:00:20 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x2000, 0x4}, 0x0, 0x0) 08:00:20 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8983, 0x0) 08:00:20 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8955, 0x0) 08:00:20 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) r2 = syz_open_dev$dri(&(0x7f0000000180), 0xfc, 0x0) r3 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r5) ioctl$DRM_IOCTL_MODE_DIRTYFB(r3, 0xc01864b1, &(0x7f0000000300)={r4, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000280)={&(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0], 0x2, r4, 0xe0e0e0e0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000140)=r6) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) (async) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) (async) syz_open_dev$dri(&(0x7f0000000180), 0xfc, 0x0) (async) syz_open_dev$dri(0x0, 0x3, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) (async) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000180)=r5) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r3, 0xc01864b1, &(0x7f0000000300)={r4, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000280)={&(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0], 0x2, r4, 0xe0e0e0e0}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) (async) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000140)=r6) (async) 08:00:20 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8954, 0x0) 08:00:20 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x2100, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:20 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x89a0, 0x0) 08:00:20 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8955, 0x0) 08:00:20 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x4000, 0x4}, 0x0, 0x0) 08:00:20 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x89a1, 0x0) 08:00:20 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000000)={0x0, 0x30, 0x4, 0x8, 0x1, [0x0, 0x0], [0x1, 0x2, 0x20, 0x80], [0x8, 0x800, 0x3, 0x1ff], [0x5, 0x0, 0x7673, 0x9]}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000080)={0x0, 0x40000000, 0x80, 0x200, 0x3, [0x0, 0x0], [0x0, 0x4, 0x6, 0x58a], [0x8, 0xd8, 0x0, 0x2a8db903], [0x5, 0x37e0000, 0x2000, 0x1]}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000100)={0x0, 0x1, 0x80, 0x3, 0x3, [0x0, 0x0], [0x81, 0x5, 0x8fdd, 0x9], [0x7f, 0x651, 0x9, 0x10000], [0x7fffffffffffffff, 0x8, 0x1, 0x2]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000180)={r2, 0x4c10caad, 0x7, 0x0, 0x0, [0x0, r3, r4, r5], [0x0, 0x1, 0x9, 0x1], [0x9, 0x8000, 0x6, 0x400], [0x0, 0x542, 0x7ff, 0x81]}) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000340)) 08:00:20 executing program 4: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x8954, 0x0) 08:00:20 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x2200, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:20 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x8955, 0x0) 08:00:21 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x4100, 0x4}, 0x0, 0x0) 08:00:21 executing program 1: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x8955, 0x0) 08:00:21 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x400448c9, 0x0) 08:00:21 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000000)={0x0, 0x30, 0x4, 0x8, 0x1, [0x0, 0x0], [0x1, 0x2, 0x20, 0x80], [0x8, 0x800, 0x3, 0x1ff], [0x5, 0x0, 0x7673, 0x9]}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000080)={0x0, 0x40000000, 0x80, 0x200, 0x3, [0x0, 0x0], [0x0, 0x4, 0x6, 0x58a], [0x8, 0xd8, 0x0, 0x2a8db903], [0x5, 0x37e0000, 0x2000, 0x1]}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000100)={0x0, 0x1, 0x80, 0x3, 0x3, [0x0, 0x0], [0x81, 0x5, 0x8fdd, 0x9], [0x7f, 0x651, 0x9, 0x10000], [0x7fffffffffffffff, 0x8, 0x1, 0x2]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000180)={r2, 0x4c10caad, 0x7, 0x0, 0x0, [0x0, r3, r4, r5], [0x0, 0x1, 0x9, 0x1], [0x9, 0x8000, 0x6, 0x400], [0x0, 0x542, 0x7ff, 0x81]}) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000340)) 08:00:21 executing program 4: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x8954, 0x0) 08:00:21 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x2300, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:21 executing program 1: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x8955, 0x0) 08:00:21 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x7f00, 0x4}, 0x0, 0x0) 08:00:21 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000180)=r2) (async) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000180)=r2) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000000)={0x0, 0x30, 0x4, 0x8, 0x1, [], [0x1, 0x2, 0x20, 0x80], [0x8, 0x800, 0x3, 0x1ff], [0x5, 0x0, 0x7673, 0x9]}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000000)={0x0, 0x30, 0x4, 0x8, 0x1, [0x0, 0x0], [0x1, 0x2, 0x20, 0x80], [0x8, 0x800, 0x3, 0x1ff], [0x5, 0x0, 0x7673, 0x9]}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000080)={0x0, 0x40000000, 0x80, 0x200, 0x3, [0x0, 0x0], [0x0, 0x4, 0x6, 0x58a], [0x8, 0xd8, 0x0, 0x2a8db903], [0x5, 0x37e0000, 0x2000, 0x1]}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000100)={0x0, 0x1, 0x80, 0x3, 0x3, [0x0, 0x0], [0x81, 0x5, 0x8fdd, 0x9], [0x7f, 0x651, 0x9, 0x10000], [0x7fffffffffffffff, 0x8, 0x1, 0x2]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000180)={r2, 0x4c10caad, 0x7, 0x0, 0x0, [0x0, r3, r4, r5], [0x0, 0x1, 0x9, 0x1], [0x9, 0x8000, 0x6, 0x400], [0x0, 0x542, 0x7ff, 0x81]}) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000340)) (async) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000340)) 08:00:21 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x400448dd, 0x0) 08:00:21 executing program 1: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x8955, 0x0) 08:00:21 executing program 4: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x8954, 0x0) 08:00:21 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x20000, 0x4}, 0x0, 0x0) 08:00:21 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x4000, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:21 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x400454ca, 0x0) 08:00:21 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000140)={0x0, r1, r3, 0x400, 0x3, 0x57, 0x401, 0x2, 0x0, 0x3ff, 0x10000, 0xfffffffe}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000040)={0x0, 0x3, 0x2, 0x2, &(0x7f0000000000)=[{0xff, 0xa9e7, 0xfbff, 0x1}, {0x2, 0x8, 0x9, 0x5}]}) 08:00:21 executing program 1: socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x8955, 0x0) 08:00:21 executing program 4: socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x8954, 0x0) 08:00:21 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x200000, 0x4}, 0x0, 0x0) 08:00:21 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x40049409, 0x0) 08:00:21 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000140)={0x0, r1, r3, 0x400, 0x3, 0x57, 0x401, 0x2, 0x0, 0x3ff, 0x10000, 0xfffffffe}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) (async) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000040)={0x0, 0x3, 0x2, 0x2, &(0x7f0000000000)=[{0xff, 0xa9e7, 0xfbff, 0x1}, {0x2, 0x8, 0x9, 0x5}]}) 08:00:21 executing program 1: socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x8955, 0x0) 08:00:21 executing program 4: socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x8954, 0x0) 08:00:21 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x800000, 0x4}, 0x0, 0x0) 08:00:21 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x4100, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:21 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x40086602, 0x0) 08:00:21 executing program 1: socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x8955, 0x0) 08:00:21 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000140)={0x0, r1, r3, 0x400, 0x3, 0x57, 0x401, 0x2, 0x0, 0x3ff, 0x10000, 0xfffffffe}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000040)={0x0, 0x3, 0x2, 0x2, &(0x7f0000000000)=[{0xff, 0xa9e7, 0xfbff, 0x1}, {0x2, 0x8, 0x9, 0x5}]}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) (async) syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000280)) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000140)={0x0, r1, r3, 0x400, 0x3, 0x57, 0x401, 0x2, 0x0, 0x3ff, 0x10000, 0xfffffffe}) (async) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000040)={0x0, 0x3, 0x2, 0x2, &(0x7f0000000000)=[{0xff, 0xa9e7, 0xfbff, 0x1}, {0x2, 0x8, 0x9, 0x5}]}) (async) 08:00:21 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x4200, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:21 executing program 4: socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x8954, 0x0) 08:00:22 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0xf0ff1f, 0x4}, 0x0, 0x0) 08:00:22 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x40186366, 0x0) 08:00:22 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x40086602, 0x0) 08:00:22 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x40049409, 0x0) 08:00:22 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x4800, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:22 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1000000, 0x4}, 0x0, 0x0) 08:00:22 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r5 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r5, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000180)={r3, r4, r7, 0x5c, 0x101, 0x2, 0x9567, 0x6, 0x101, 0x7, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f00000001c0)={r6}) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000340)) 08:00:22 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x401c5820, 0x0) 08:00:22 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x40086602, 0x0) 08:00:22 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x40049409, 0x0) 08:00:22 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x2000000, 0x4}, 0x0, 0x0) 08:00:22 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x6000, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:22 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x4020940d, 0x0) 08:00:22 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) (async) r5 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r5, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r4, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000180)={r3, r4, r7, 0x5c, 0x101, 0x2, 0x9567, 0x6, 0x101, 0x7, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f00000001c0)={r6}) (async) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000340)) 08:00:22 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x40049409, 0x0) 08:00:22 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x40086602, 0x0) 08:00:22 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x2040000, 0x4}, 0x0, 0x0) 08:00:22 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x80086301, 0x0) 08:00:22 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xd503, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:22 executing program 1: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x40049409, 0x0) 08:00:22 executing program 4: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x40086602, 0x0) 08:00:22 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) r5 = syz_open_dev$dri(&(0x7f0000000240), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r5, 0xc01064c1, &(0x7f0000000280)) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r4, 0x0}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000180)={r3, r4, r7, 0x5c, 0x101, 0x2, 0x9567, 0x6, 0x101, 0x7, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f00000001c0)={r6}) (async) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000340)) 08:00:22 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x3000000, 0x4}, 0x0, 0x0) 08:00:22 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x80086601, 0x0) 08:00:22 executing program 4: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x40086602, 0x0) 08:00:22 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x200000, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:22 executing program 1: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x40049409, 0x0) 08:00:22 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_setup(0x1bf6, &(0x7f0000000000)={0x0, 0x4e34, 0x100, 0x2, 0x3e1}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x5eac, &(0x7f0000000100)={0x0, 0xbc06, 0x1, 0x2, 0x14b}, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) 08:00:22 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x4000000, 0x4}, 0x0, 0x0) 08:00:23 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x80108906, 0x0) 08:00:23 executing program 1: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x40049409, 0x0) 08:00:23 executing program 4: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x40086602, 0x0) 08:00:23 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x400000, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:23 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_setup(0x1bf6, &(0x7f0000000000)={0x0, 0x4e34, 0x100, 0x2, 0x3e1}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x5eac, &(0x7f0000000100)={0x0, 0xbc06, 0x1, 0x2, 0x14b}, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) syz_io_uring_setup(0x1bf6, &(0x7f0000000000)={0x0, 0x4e34, 0x100, 0x2, 0x3e1}, &(0x7f0000000080), &(0x7f00000000c0)) (async) syz_io_uring_setup(0x5eac, &(0x7f0000000100)={0x0, 0xbc06, 0x1, 0x2, 0x14b}, &(0x7f0000000180), &(0x7f00000001c0)) (async) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) (async) 08:00:23 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x80108907, 0x0) 08:00:23 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x5000000, 0x4}, 0x0, 0x0) 08:00:23 executing program 1: socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x40049409, 0x0) 08:00:23 executing program 4: socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x40086602, 0x0) 08:00:23 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x600000, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:23 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_setup(0x1bf6, &(0x7f0000000000)={0x0, 0x4e34, 0x100, 0x2, 0x3e1}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x5eac, &(0x7f0000000100)={0x0, 0xbc06, 0x1, 0x2, 0x14b}, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) syz_io_uring_setup(0x1bf6, &(0x7f0000000000)={0x0, 0x4e34, 0x100, 0x2, 0x3e1}, &(0x7f0000000080), &(0x7f00000000c0)) (async) syz_io_uring_setup(0x5eac, &(0x7f0000000100)={0x0, 0xbc06, 0x1, 0x2, 0x14b}, &(0x7f0000000180), &(0x7f00000001c0)) (async) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) (async) 08:00:23 executing program 4: socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x40086602, 0x0) 08:00:23 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x6040000, 0x4}, 0x0, 0x0) 08:00:23 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x801c581f, 0x0) 08:00:23 executing program 1: socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x40049409, 0x0) 08:00:23 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x800000, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:23 executing program 4: socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x40086602, 0x0) 08:00:23 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x7000000, 0x4}, 0x0, 0x0) 08:00:23 executing program 1: socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x40049409, 0x0) 08:00:23 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000180)=r3) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={r2, 0x7, 0x9, 0x3f, 0x4, 0xa5c, 0x7}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)={r2}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r4, r2, 0x8, 0x2, 0x3}) 08:00:23 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc0045878, 0x0) 08:00:23 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x80108906, 0x0) 08:00:23 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x80ffff, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:23 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x8000000, 0x4}, 0x0, 0x0) 08:00:23 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x401c5820, 0x0) 08:00:23 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc0045878, 0x0) 08:00:23 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async, rerun: 32) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000180)=r3) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={r2, 0x7, 0x9, 0x3f, 0x4, 0xa5c, 0x7}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) (async) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)={r2}) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r4, r2, 0x8, 0x2, 0x3}) 08:00:23 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x80108906, 0x0) 08:00:24 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0xc0ffff, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:24 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x8100000, 0x4}, 0x0, 0x0) 08:00:24 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc0189436, 0x0) 08:00:24 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x80108906, 0x0) 08:00:24 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x401c5820, 0x0) 08:00:24 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000180)=r3) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={r2, 0x7, 0x9, 0x3f, 0x4, 0xa5c, 0x7}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)={r2}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r4, r2, 0x8, 0x2, 0x3}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) syz_open_dev$dri(0x0, 0x3, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) (async) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000180)=r3) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={r2, 0x7, 0x9, 0x3f, 0x4, 0xa5c, 0x7}) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r2, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) (async) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)={r2}) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r4, r2, 0x8, 0x2, 0x3}) (async) 08:00:24 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x9000000, 0x4}, 0x0, 0x0) 08:00:24 executing program 4: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x80108906, 0x0) 08:00:24 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc020660b, 0x0) 08:00:24 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x401c5820, 0x0) 08:00:24 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x1000000, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:24 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080), &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0x3, 0x4, 0x1}) r4 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f0000000180)=r6) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f0000000300)={r5, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={r2, r3, r5, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) 08:00:24 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0xe000000, 0x4}, 0x0, 0x0) 08:00:24 executing program 4: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x80108906, 0x0) 08:00:24 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080), &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0x3, 0x4, 0x1}) r4 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f0000000180)=r6) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f0000000300)={r5, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={r2, r3, r5, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r1) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080), &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0x3, 0x4, 0x1}) (async) syz_open_dev$dri(0x0, 0x3, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) (async) ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f0000000180)=r6) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f0000000300)={r5, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={r2, r3, r5, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) (async) 08:00:24 executing program 1: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x401c5820, 0x0) 08:00:24 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0xf000000, 0x4}, 0x0, 0x0) 08:00:24 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, 0x0) 08:00:24 executing program 4: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x80108906, 0x0) 08:00:24 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x2000000, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:24 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080), &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0x3, 0x4, 0x1}) r4 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f0000000180)=r6) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f0000000300)={r5, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={r2, r3, r5, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000340)) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r1) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080), &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0x3, 0x4, 0x1}) (async) syz_open_dev$dri(0x0, 0x3, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) (async) ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f0000000180)=r6) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f0000000300)={r5, 0x82d4b5ec255ecb79, 0x9, 0x1, &(0x7f00000002c0)=[{0x8, 0x0, 0x5}]}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={r2, r3, r5, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) (async) 08:00:24 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x11000000, 0x4}, 0x0, 0x0) 08:00:24 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, 0x0) 08:00:24 executing program 1: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x401c5820, 0x0) 08:00:24 executing program 4: socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x80108906, 0x0) 08:00:24 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, 0x0) (async) 08:00:24 executing program 1: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x401c5820, 0x0) 08:00:24 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x2040000, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) 08:00:24 executing program 2: r0 = socket$inet(0x2, 0xa, 0x8) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'dummy0\x00', {0x3}, 0x6}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000280)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4, r4, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000180)=r3) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000040)={r5}) 08:00:24 executing program 0: syz_io_uring_setup(0x5cab, &(0x7f0000000000)={0x0, 0x1fffefff, 0x4}, 0x0, 0x0) 08:00:25 executing program 4: socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x80108906, 0x0) [ 1077.407335][ T3282] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 1077.487697][ T3282] ================================================================== [ 1077.495811][ T3282] BUG: KASAN: slab-out-of-bounds in dsa_user_prechangeupper+0x3a/0x240 [ 1077.504199][ T3282] Read of size 8 at addr ffff888060a52c90 by task syz-executor.2/3282 [ 1077.512389][ T3282] [ 1077.514742][ T3282] CPU: 1 PID: 3282 Comm: syz-executor.2 Not tainted 6.7.0-syzkaller-10085-g1b1934dbbdcf #0 [ 1077.525267][ T3282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1077.535347][ T3282] Call Trace: [ 1077.538650][ T3282] [ 1077.541604][ T3282] dump_stack_lvl+0x1e7/0x2d0 [ 1077.546320][ T3282] ? tcp_gro_dev_warn+0x260/0x260 [ 1077.551384][ T3282] ? panic+0x850/0x850 [ 1077.555497][ T3282] ? _printk+0xd5/0x120 [ 1077.559701][ T3282] ? __virt_addr_valid+0x17e/0x480 [ 1077.564853][ T3282] print_report+0x163/0x540 [ 1077.569397][ T3282] ? __virt_addr_valid+0x17e/0x480 [ 1077.574554][ T3282] ? __virt_addr_valid+0x3d1/0x480 [ 1077.579704][ T3282] ? __phys_addr+0xba/0x170 08:00:25 executing program 1: socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0x401c5820, 0x0) [ 1077.584242][ T3282] ? dsa_user_prechangeupper+0x3a/0x240 [ 1077.589829][ T3282] kasan_report+0x142/0x170 [ 1077.594376][ T3282] ? dsa_user_prechangeupper+0x3a/0x240 [ 1077.599980][ T3282] dsa_user_prechangeupper+0x3a/0x240 [ 1077.605368][ T3282] ? dsa_user_netdevice_event+0x1a27/0x2ab0 [ 1077.611275][ T3282] dsa_user_netdevice_event+0x1a37/0x2ab0 [ 1077.617010][ T3282] ? read_lock_is_recursive+0x20/0x20 [ 1077.622479][ T3282] ? packet_notifier+0x76/0xa30 [ 1077.627401][ T3282] ? dsa_user_port_obj_del+0x530/0x530 [ 1077.632873][ T3282] ? tls_dev_event+0x8f6/0x10a0 [ 1077.637877][ T3282] ? br_device_event+0x148/0x970 [ 1077.642823][ T3282] ? br_switchdev_event+0x540/0x540 [ 1077.648035][ T3282] ? packet_notifier+0xa1a/0xa30 [ 1077.652981][ T3282] ? packet_notifier+0x76/0xa30 [ 1077.657849][ T3282] notifier_call_chain+0x18c/0x3b0 [ 1077.662987][ T3282] __netdev_upper_dev_link+0x39d/0x670 [ 1077.668474][ T3282] ? netdev_upper_dev_link+0xe0/0xe0 [ 1077.673792][ T3282] ? netdev_upper_dev_link+0x87/0xe0 [ 1077.679111][ T3282] netdev_upper_dev_link+0x9e/0xe0 [ 1077.684256][ T3282] ? netdev_master_upper_dev_get_rcu+0x1a0/0x1a0 [ 1077.690664][ T3282] ? __kasan_kmalloc+0x98/0xb0 [ 1077.695450][ T3282] ? register_vlan_dev+0x342/0x810 [ 1077.700667][ T3282] ? register_vlan_dev+0x342/0x810 [ 1077.705786][ T3282] register_vlan_dev+0x3af/0x810 [ 1077.710739][ T3282] register_vlan_device+0x378/0x4a0 [ 1077.715942][ T3282] ? cap_capable+0x1b4/0x240 [ 1077.720553][ T3282] ? vlan_ioctl_handler+0x9d0/0x9d0 [ 1077.725760][ T3282] vlan_ioctl_handler+0x2b9/0x9d0 [ 1077.730788][ T3282] ? net_generic+0x230/0x230 [ 1077.735388][ T3282] ? __asan_memset+0x23/0x40 [ 1077.739978][ T3282] ? smack_file_ioctl+0x2a1/0x3a0 [ 1077.745010][ T3282] ? net_generic+0x230/0x230 [ 1077.750046][ T3282] sock_ioctl+0x66b/0x8c0 [ 1077.754410][ T3282] ? sock_poll+0x410/0x410 [ 1077.758857][ T3282] ? __fget_files+0x28/0x470 [ 1077.763455][ T3282] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1077.768404][ T3282] ? security_file_ioctl+0x81/0xa0 [ 1077.773523][ T3282] ? sock_poll+0x410/0x410 [ 1077.777951][ T3282] __se_sys_ioctl+0xf8/0x170 [ 1077.782553][ T3282] do_syscall_64+0xf5/0x230 [ 1077.787064][ T3282] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1077.792966][ T3282] RIP: 0033:0x7fc54c27cda9 [ 1077.797381][ T3282] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1077.816982][ T3282] RSP: 002b:00007fc54b5ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1077.825918][ T3282] RAX: ffffffffffffffda RBX: 00007fc54c3abf80 RCX: 00007fc54c27cda9 [ 1077.833890][ T3282] RDX: 0000000020000000 RSI: 0000000000008982 RDI: 0000000000000003 [ 1077.841859][ T3282] RBP: 00007fc54c2c947a R08: 0000000000000000 R09: 0000000000000000 [ 1077.849825][ T3282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1077.857809][ T3282] R13: 000000000000000b R14: 00007fc54c3abf80 R15: 00007ffdd357e7b8 [ 1077.865789][ T3282] [ 1077.868809][ T3282] [ 1077.871132][ T3282] Allocated by task 5075: [ 1077.875454][ T3282] kasan_save_track+0x3f/0x70 [ 1077.880136][ T3282] __kasan_kmalloc+0x98/0xb0 [ 1077.884729][ T3282] __kmalloc_node+0x24e/0x4e0 [ 1077.889443][ T3282] kvmalloc_node+0x72/0x180 [ 1077.893949][ T3282] alloc_netdev_mqs+0x9d/0xf80 [ 1077.898721][ T3282] rtnl_create_link+0x2ea/0xc10 [ 1077.903577][ T3282] rtnl_newlink+0x141e/0x2080 [ 1077.908258][ T3282] rtnetlink_rcv_msg+0x882/0x1030 [ 1077.913300][ T3282] netlink_rcv_skb+0x1df/0x430 [ 1077.918088][ T3282] netlink_unicast+0x7e6/0x980 [ 1077.922856][ T3282] netlink_sendmsg+0xa37/0xd70 [ 1077.927626][ T3282] __sys_sendto+0x440/0x600 [ 1077.932156][ T3282] __x64_sys_sendto+0xde/0xf0 [ 1077.936839][ T3282] do_syscall_64+0xf5/0x230 [ 1077.941337][ T3282] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1077.947244][ T3282] [ 1077.949567][ T3282] The buggy address belongs to the object at ffff888060a52000 [ 1077.949567][ T3282] which belongs to the cache kmalloc-cg-4k of size 4096 [ 1077.963883][ T3282] The buggy address is located 3216 bytes inside of [ 1077.963883][ T3282] allocated 3223-byte region [ffff888060a52000, ffff888060a52c97) [ 1077.978217][ T3282] [ 1077.980542][ T3282] The buggy address belongs to the physical page: [ 1077.986949][ T3282] page:ffffea0001829400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60a50 [ 1077.997122][ T3282] head:ffffea0001829400 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1078.006070][ T3282] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1078.014059][ T3282] page_type: 0xffffffff() [ 1078.018395][ T3282] raw: 00fff00000000840 ffff888012c4f500 dead000000000122 0000000000000000 [ 1078.026981][ T3282] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 1078.035573][ T3282] page dumped because: kasan: bad access detected [ 1078.041981][ T3282] page_owner tracks the page as allocated [ 1078.047698][ T3282] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5066, tgid 5066 (syz-executor.3), ts 80540479115, free_ts 23448771027 [ 1078.069353][ T3282] post_alloc_hook+0x1e6/0x210 [ 1078.074132][ T3282] get_page_from_freelist+0x33ea/0x3570 [ 1078.079701][ T3282] __alloc_pages+0x255/0x680 [ 1078.084293][ T3282] alloc_slab_page+0x5f/0x160 [ 1078.088969][ T3282] new_slab+0x84/0x2f0 [ 1078.093042][ T3282] ___slab_alloc+0xd17/0x13d0 [ 1078.097720][ T3282] __kmalloc_node_track_caller+0x2cd/0x4e0 [ 1078.103540][ T3282] kmemdup+0x2a/0x60 [ 1078.107449][ T3282] __addrconf_sysctl_register+0xb1/0x3f0 [ 1078.113165][ T3282] addrconf_sysctl_register+0x167/0x1c0 [ 1078.118721][ T3282] ipv6_add_dev+0xd60/0x1290 [ 1078.123329][ T3282] addrconf_notify+0x6a7/0x1010 [ 1078.128183][ T3282] notifier_call_chain+0x18c/0x3b0 [ 1078.133326][ T3282] register_netdevice+0x150c/0x19b0 [ 1078.138592][ T3282] rtnl_newlink+0x1584/0x2080 [ 1078.143277][ T3282] rtnetlink_rcv_msg+0x882/0x1030 [ 1078.148324][ T3282] page last free pid 1 tgid 1 stack trace: [ 1078.154120][ T3282] free_unref_page_prepare+0x959/0xa80 [ 1078.159578][ T3282] free_unref_page+0x37/0x3f0 [ 1078.164265][ T3282] free_contig_range+0x9e/0x160 [ 1078.169119][ T3282] destroy_args+0x8a/0x890 [ 1078.173582][ T3282] debug_vm_pgtable+0x4ba/0x540 [ 1078.178450][ T3282] do_one_initcall+0x234/0x810 [ 1078.183263][ T3282] do_initcall_level+0x157/0x210 [ 1078.188219][ T3282] do_initcalls+0x3f/0x80 [ 1078.192554][ T3282] kernel_init_freeable+0x429/0x5c0 [ 1078.197758][ T3282] kernel_init+0x1d/0x2a0 [ 1078.202103][ T3282] ret_from_fork+0x48/0x80 [ 1078.206532][ T3282] ret_from_fork_asm+0x11/0x20 [ 1078.211304][ T3282] [ 1078.213626][ T3282] Memory state around the buggy address: [ 1078.219264][ T3282] ffff888060a52b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1078.227324][ T3282] ffff888060a52c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08:00:25 executing program 3: syz_io_uring_setup(0x4ec8, &(0x7f00000001c0)={0x0, 0x3000000, 0x9c0}, &(0x7f0000000240), &(0x7f0000000280)) [ 1078.235383][ T3282] >ffff888060a52c80: 00 00 07 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1078.243446][ T3282] ^ [ 1078.248035][ T3282] ffff888060a52d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1078.256101][ T3282] ffff888060a52d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1078.264155][ T3282] ================================================================== 08:00:25 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, 0x0) syz_io_uring_setup(0x6, &(0x7f0000000000)={0x0, 0xd7a8, 0x20, 0x0, 0x2eb}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) accept4(r0, &(0x7f0000000140)=@caif, &(0x7f00000001c0)=0x80, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x2004, @fd_index=0x2, 0xb2, 0x0, 0x0, 0x0, 0x0, {0x2}}) [ 1078.344775][ T3282] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1078.352023][ T3282] CPU: 0 PID: 3282 Comm: syz-executor.2 Not tainted 6.7.0-syzkaller-10085-g1b1934dbbdcf #0 [ 1078.362053][ T3282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1078.372165][ T3282] Call Trace: [ 1078.375470][ T3282] [ 1078.378435][ T3282] dump_stack_lvl+0x1e7/0x2d0 [ 1078.383193][ T3282] ? tcp_gro_dev_warn+0x260/0x260 [ 1078.388287][ T3282] ? panic+0x850/0x850 [ 1078.392390][ T3282] ? vscnprintf+0x5d/0x80 [ 1078.396763][ T3282] panic+0x349/0x850 [ 1078.400691][ T3282] ? check_panic_on_warn+0x21/0xa0 [ 1078.405834][ T3282] ? __memcpy_flushcache+0x2b0/0x2b0 [ 1078.411163][ T3282] ? _raw_spin_unlock_irqrestore+0x12c/0x140 [ 1078.417186][ T3282] ? _raw_spin_unlock+0x40/0x40 [ 1078.422075][ T3282] ? print_report+0x4fb/0x540 [ 1078.426808][ T3282] check_panic_on_warn+0x82/0xa0 [ 1078.431777][ T3282] ? dsa_user_prechangeupper+0x3a/0x240 [ 1078.437367][ T3282] end_report+0x6e/0x140 [ 1078.441654][ T3282] kasan_report+0x153/0x170 [ 1078.446205][ T3282] ? dsa_user_prechangeupper+0x3a/0x240 [ 1078.451799][ T3282] dsa_user_prechangeupper+0x3a/0x240 [ 1078.457210][ T3282] ? dsa_user_netdevice_event+0x1a27/0x2ab0 [ 1078.463124][ T3282] dsa_user_netdevice_event+0x1a37/0x2ab0 [ 1078.468902][ T3282] ? read_lock_is_recursive+0x20/0x20 [ 1078.474306][ T3282] ? packet_notifier+0x76/0xa30 [ 1078.479171][ T3282] ? dsa_user_port_obj_del+0x530/0x530 [ 1078.484643][ T3282] ? tls_dev_event+0x8f6/0x10a0 [ 1078.489522][ T3282] ? br_device_event+0x148/0x970 [ 1078.494479][ T3282] ? br_switchdev_event+0x540/0x540 [ 1078.499687][ T3282] ? packet_notifier+0xa1a/0xa30 [ 1078.504641][ T3282] ? packet_notifier+0x76/0xa30 [ 1078.509501][ T3282] notifier_call_chain+0x18c/0x3b0 [ 1078.514653][ T3282] __netdev_upper_dev_link+0x39d/0x670 [ 1078.520477][ T3282] ? netdev_upper_dev_link+0xe0/0xe0 [ 1078.525773][ T3282] ? netdev_upper_dev_link+0x87/0xe0 [ 1078.531066][ T3282] netdev_upper_dev_link+0x9e/0xe0 [ 1078.536185][ T3282] ? netdev_master_upper_dev_get_rcu+0x1a0/0x1a0 [ 1078.542520][ T3282] ? __kasan_kmalloc+0x98/0xb0 [ 1078.547297][ T3282] ? register_vlan_dev+0x342/0x810 [ 1078.552420][ T3282] ? register_vlan_dev+0x342/0x810 [ 1078.557547][ T3282] register_vlan_dev+0x3af/0x810 [ 1078.562501][ T3282] register_vlan_device+0x378/0x4a0 [ 1078.567711][ T3282] ? cap_capable+0x1b4/0x240 [ 1078.572309][ T3282] ? vlan_ioctl_handler+0x9d0/0x9d0 [ 1078.577522][ T3282] vlan_ioctl_handler+0x2b9/0x9d0 [ 1078.582559][ T3282] ? net_generic+0x230/0x230 [ 1078.587162][ T3282] ? __asan_memset+0x23/0x40 [ 1078.591757][ T3282] ? smack_file_ioctl+0x2a1/0x3a0 [ 1078.596793][ T3282] ? net_generic+0x230/0x230 [ 1078.601392][ T3282] sock_ioctl+0x66b/0x8c0 [ 1078.605740][ T3282] ? sock_poll+0x410/0x410 [ 1078.610172][ T3282] ? __fget_files+0x28/0x470 [ 1078.614770][ T3282] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1078.620241][ T3282] ? security_file_ioctl+0x81/0xa0 [ 1078.625365][ T3282] ? sock_poll+0x410/0x410 [ 1078.629794][ T3282] __se_sys_ioctl+0xf8/0x170 [ 1078.634388][ T3282] do_syscall_64+0xf5/0x230 [ 1078.638899][ T3282] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1078.644805][ T3282] RIP: 0033:0x7fc54c27cda9 [ 1078.649225][ T3282] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1078.668834][ T3282] RSP: 002b:00007fc54b5ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1078.677258][ T3282] RAX: ffffffffffffffda RBX: 00007fc54c3abf80 RCX: 00007fc54c27cda9 [ 1078.685244][ T3282] RDX: 0000000020000000 RSI: 0000000000008982 RDI: 0000000000000003 [ 1078.693317][ T3282] RBP: 00007fc54c2c947a R08: 0000000000000000 R09: 0000000000000000 [ 1078.701310][ T3282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1078.709292][ T3282] R13: 000000000000000b R14: 00007fc54c3abf80 R15: 00007ffdd357e7b8 [ 1078.717284][ T3282] [ 1078.720634][ T3282] Kernel Offset: disabled [ 1078.724955][ T3282] Rebooting in 86400 seconds..