7f0000000100)) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4) 20:24:33 executing program 5: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000040)) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/uts\x00') 20:24:33 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x1) r2 = socket$packet(0x11, 0x1, 0x300) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) 20:24:33 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) (async) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x1) r2 = socket$packet(0x11, 0x1, 0x300) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) 20:24:33 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x622581, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000000)) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x1412, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x8000, 0x8000, 0x0, 0x4, {{0x22, 0x4, 0x3, 0x8, 0x88, 0x66, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x43}, {[@noop, @rr={0x7, 0x23, 0x81, [@empty, @private=0xa010100, @remote, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010102, @loopback]}, @lsrr={0x83, 0x2b, 0x97, [@loopback, @remote, @initdev={0xac, 0x1e, 0x6, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010102, @local, @dev={0xac, 0x14, 0x14, 0xb}, @empty, @broadcast]}, @lsrr={0x83, 0xf, 0xd5, [@remote, @empty, @broadcast]}, @cipso={0x86, 0xffffffffffffffb6, 0xffffffffffffffff, [{0x1ffd46a3b1c0581, 0xd, "4d98d569b29b781c68782c"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000200)={'ip6gre0\x00', r3, 0x2f, 0x5, 0x3, 0x4, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x10, 0x1, 0x0, 0x81}}) 20:24:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x4004011) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) 20:24:33 executing program 5: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000040)) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/uts\x00') getpgid(0x0) (async) sched_rr_get_interval(r0, &(0x7f0000000040)) (async) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/uts\x00') (async) 20:24:33 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (fail_nth: 1) 20:24:33 executing program 3: sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1409, 0x400, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}}, 0x80) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r2, 0x15, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1c}}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040800}, 0x400c001) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) socket$inet_udp(0x2, 0x2, 0x0) 20:24:33 executing program 1: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/pid_for_children\x00') 20:24:33 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x622581, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000000)) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x1412, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x8000, 0x8000, 0x0, 0x4, {{0x22, 0x4, 0x3, 0x8, 0x88, 0x66, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x43}, {[@noop, @rr={0x7, 0x23, 0x81, [@empty, @private=0xa010100, @remote, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010102, @loopback]}, @lsrr={0x83, 0x2b, 0x97, [@loopback, @remote, @initdev={0xac, 0x1e, 0x6, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010102, @local, @dev={0xac, 0x14, 0x14, 0xb}, @empty, @broadcast]}, @lsrr={0x83, 0xf, 0xd5, [@remote, @empty, @broadcast]}, @cipso={0x86, 0xffffffffffffffb6, 0xffffffffffffffff, [{0x1ffd46a3b1c0581, 0xd, "4d98d569b29b781c68782c"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000200)={'ip6gre0\x00', r3, 0x2f, 0x5, 0x3, 0x4, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x10, 0x1, 0x0, 0x81}}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x622581, 0x0) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000000)) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x1412, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r2, 0x7439) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x8000, 0x8000, 0x0, 0x4, {{0x22, 0x4, 0x3, 0x8, 0x88, 0x66, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x43}, {[@noop, @rr={0x7, 0x23, 0x81, [@empty, @private=0xa010100, @remote, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010102, @loopback]}, @lsrr={0x83, 0x2b, 0x97, [@loopback, @remote, @initdev={0xac, 0x1e, 0x6, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010102, @local, @dev={0xac, 0x14, 0x14, 0xb}, @empty, @broadcast]}, @lsrr={0x83, 0xf, 0xd5, [@remote, @empty, @broadcast]}, @cipso={0x86, 0xffffffffffffffb6, 0xffffffffffffffff, [{0x1ffd46a3b1c0581, 0xd, "4d98d569b29b781c68782c"}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000200)={'ip6gre0\x00', r3, 0x2f, 0x5, 0x3, 0x4, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x10, 0x1, 0x0, 0x81}}) (async) 20:24:33 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000d00d46000000000000"], 0x10}, 0x1, 0x0, 0x0, 0x20008811}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000180)) 20:24:33 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000d00d46000000000000"], 0x10}, 0x1, 0x0, 0x0, 0x20008811}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000180)) 20:24:33 executing program 2: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/user\x00') 20:24:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x4004011) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x4004011) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) (async) 20:24:33 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000d00d46000000000000"], 0x10}, 0x1, 0x0, 0x0, 0x20008811}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000180)) [ 538.926998] FAULT_INJECTION: forcing a failure. [ 538.926998] name failslab, interval 1, probability 0, space 0, times 0 [ 538.993703] CPU: 1 PID: 16810 Comm: syz-executor.0 Not tainted 4.14.307-syzkaller #0 [ 539.001627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 539.011011] Call Trace: [ 539.013632] dump_stack+0x1b2/0x281 [ 539.017285] should_fail.cold+0x10a/0x149 [ 539.021453] should_failslab+0xd6/0x130 [ 539.025449] kmem_cache_alloc+0x28e/0x3c0 [ 539.029615] getname_flags+0xc8/0x550 [ 539.033438] do_sys_open+0x1ce/0x410 [ 539.037169] ? filp_open+0x60/0x60 [ 539.040725] ? __do_page_fault+0x159/0xad0 [ 539.044972] ? do_syscall_64+0x4c/0x640 [ 539.048959] ? SyS_open+0x30/0x30 [ 539.052434] do_syscall_64+0x1d5/0x640 [ 539.056340] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 539.061537] RIP: 0033:0x7f61131d6284 [ 539.065258] RSP: 002b:00007f6111796040 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 539.072974] RAX: ffffffffffffffda RBX: 00007f6113343f80 RCX: 00007f61131d6284 [ 539.080249] RDX: 0000000000000002 RSI: 00007f61117960d0 RDI: 00000000ffffff9c 20:24:33 executing program 1: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/pid_for_children\x00') 20:24:33 executing program 1: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/pid_for_children\x00') 20:24:33 executing program 2: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/user\x00') fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) (async) syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/user\x00') (async) [ 539.087528] RBP: 00007f61117960d0 R08: 0000000000000000 R09: 00007f6111795f50 [ 539.094806] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 539.102087] R13: 00007ffc5069065f R14: 00007f6111796300 R15: 0000000000022000 20:24:33 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (fail_nth: 2) 20:24:33 executing program 5: ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000000)={0x40, 0x34424752, 0x4, 0x3, 0x2, @discrete={0xffffffff, 0x81}}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') syz_open_dev$evdev(&(0x7f0000000040), 0x400, 0xc1) 20:24:33 executing program 2: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/user\x00') 20:24:33 executing program 3: sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1409, 0x400, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}}, 0x80) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r2, 0x15, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1c}}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040800}, 0x400c001) (async) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r2, 0x15, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1c}}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040800}, 0x400c001) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) 20:24:33 executing program 1: fanotify_init(0x40, 0x1) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x210000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0008070000000000ab090000010000007be374f7e26747f9f6749384ebd22842b45581c6a0aa75fdbbe064f574a1cec373e758229a8aebebc9782e3b58eb42d060e5940a1ed6d15f19523f1bebe3d8585ccf50fa7e206a3e2315e6bdbdfb1e6a4a42f2"], 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x480050}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="ff000000", @ANYRES16=0x0, @ANYBLOB="040027bd7000ffdbdf250200000008000800020000000c000300020000000000000008000400ffffffff08000700", @ANYRES32=r1, @ANYBLOB="0c0003000300000000000000", @ANYRESOCT=r0, @ANYRES8=r2, @ANYRES16=r2, @ANYRESDEC=r4], 0x44}}, 0x4061) fanotify_init(0x20, 0x1) 20:24:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x4004011) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) 20:24:33 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private2, @local, 0x16, 0x6}}) r0 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048008}, 0x4000001) 20:24:33 executing program 5: ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000000)={0x40, 0x34424752, 0x4, 0x3, 0x2, @discrete={0xffffffff, 0x81}}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') syz_open_dev$evdev(&(0x7f0000000040), 0x400, 0xc1) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000000)={0x40, 0x34424752, 0x4, 0x3, 0x2, @discrete={0xffffffff, 0x81}}) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) syz_open_dev$evdev(&(0x7f0000000040), 0x400, 0xc1) (async) [ 539.240839] FAULT_INJECTION: forcing a failure. [ 539.240839] name failslab, interval 1, probability 0, space 0, times 0 [ 539.273218] CPU: 0 PID: 16877 Comm: syz-executor.0 Not tainted 4.14.307-syzkaller #0 [ 539.281142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 20:24:33 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private2, @local, 0x16, 0x6}}) (async) r0 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048008}, 0x4000001) 20:24:33 executing program 5: ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000000)={0x40, 0x34424752, 0x4, 0x3, 0x2, @discrete={0xffffffff, 0x81}}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) syz_open_dev$evdev(&(0x7f0000000040), 0x400, 0xc1) [ 539.290514] Call Trace: [ 539.293131] dump_stack+0x1b2/0x281 [ 539.296784] should_fail.cold+0x10a/0x149 [ 539.300962] should_failslab+0xd6/0x130 [ 539.304961] kmem_cache_alloc+0x28e/0x3c0 [ 539.309125] get_empty_filp+0x86/0x3f0 [ 539.313027] path_openat+0x84/0x2970 [ 539.316757] ? get_pid_task+0x91/0x130 [ 539.320666] ? path_lookupat+0x780/0x780 [ 539.324741] ? trace_hardirqs_on+0x10/0x10 [ 539.328998] do_filp_open+0x179/0x3c0 [ 539.332809] ? may_open_dev+0xe0/0xe0 [ 539.336621] ? __alloc_fd+0x1be/0x490 20:24:33 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1e8abeba1b03570b}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1402, 0x20, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x40) 20:24:33 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1e8abeba1b03570b}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1402, 0x20, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x40) [ 539.340882] ? lock_downgrade+0x740/0x740 [ 539.345043] ? do_raw_spin_unlock+0x164/0x220 [ 539.349553] ? _raw_spin_unlock+0x29/0x40 [ 539.353711] ? __alloc_fd+0x1be/0x490 [ 539.357557] do_sys_open+0x296/0x410 [ 539.361284] ? filp_open+0x60/0x60 [ 539.364837] ? __do_page_fault+0x159/0xad0 [ 539.369088] ? do_syscall_64+0x4c/0x640 [ 539.373112] ? SyS_open+0x30/0x30 [ 539.376581] do_syscall_64+0x1d5/0x640 [ 539.380488] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 539.385696] RIP: 0033:0x7f61131d6284 20:24:33 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (fail_nth: 3) 20:24:33 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1e8abeba1b03570b}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1402, 0x20, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x40) 20:24:33 executing program 1: fanotify_init(0x40, 0x1) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') (async, rerun: 32) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x210000, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0008070000000000ab090000010000007be374f7e26747f9f6749384ebd22842b45581c6a0aa75fdbbe064f574a1cec373e758229a8aebebc9782e3b58eb42d060e5940a1ed6d15f19523f1bebe3d8585ccf50fa7e206a3e2315e6bdbdfb1e6a4a42f2"], 0x14}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x480050}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="ff000000", @ANYRES16=0x0, @ANYBLOB="040027bd7000ffdbdf250200000008000800020000000c000300020000000000000008000400ffffffff08000700", @ANYRES32=r1, @ANYBLOB="0c0003000300000000000000", @ANYRESOCT=r0, @ANYRES8=r2, @ANYRES16=r2, @ANYRESDEC=r4], 0x44}}, 0x4061) fanotify_init(0x20, 0x1) [ 539.389420] RSP: 002b:00007f6111796040 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 539.397139] RAX: ffffffffffffffda RBX: 00007f6113343f80 RCX: 00007f61131d6284 [ 539.404429] RDX: 0000000000000002 RSI: 00007f61117960d0 RDI: 00000000ffffff9c [ 539.411736] RBP: 00007f61117960d0 R08: 0000000000000000 R09: 00007f6111795f50 [ 539.419008] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 539.426293] R13: 00007ffc5069065f R14: 00007f6111796300 R15: 0000000000022000 20:24:33 executing program 3: sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1409, 0x400, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}}, 0x80) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r2, 0x15, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1c}}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040800}, 0x400c001) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) socket$inet_udp(0x2, 0x2, 0x0) 20:24:33 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private2, @local, 0x16, 0x6}}) (async) r0 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048008}, 0x4000001) 20:24:34 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000080)={0x40, 0x778, 0x1}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) getsockname$packet(r2, &(0x7f0000000000), &(0x7f00000000c0)=0x14) ioctl$PPPIOCUNBRIDGECHAN(r1, 0x7434) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:34 executing program 5: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) r2 = getpgid(0x0) sched_rr_get_interval(r2, &(0x7f0000000ac0)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x50) syz_open_procfs$namespace(r2, &(0x7f00000000c0)='ns/uts\x00') lookup_dcookie(0x5, &(0x7f0000000000)=""/91, 0x5b) 20:24:34 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000080)=0x5f) [ 539.527188] FAULT_INJECTION: forcing a failure. [ 539.527188] name failslab, interval 1, probability 0, space 0, times 0 [ 539.559510] CPU: 1 PID: 16920 Comm: syz-executor.0 Not tainted 4.14.307-syzkaller #0 [ 539.567432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 20:24:34 executing program 5: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) (async) sched_rr_get_interval(r1, &(0x7f0000000ac0)) r2 = getpgid(0x0) sched_rr_get_interval(r2, &(0x7f0000000ac0)) (async) sched_rr_get_interval(r2, &(0x7f0000000ac0)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x50) (async) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x50) syz_open_procfs$namespace(r2, &(0x7f00000000c0)='ns/uts\x00') lookup_dcookie(0x5, &(0x7f0000000000)=""/91, 0x5b) [ 539.576832] Call Trace: [ 539.579438] dump_stack+0x1b2/0x281 [ 539.583093] should_fail.cold+0x10a/0x149 [ 539.587276] should_failslab+0xd6/0x130 [ 539.591271] kmem_cache_alloc+0x28e/0x3c0 [ 539.595469] get_empty_filp+0x86/0x3f0 [ 539.599373] path_openat+0x84/0x2970 [ 539.603127] ? get_pid_task+0x91/0x130 [ 539.607038] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 539.611930] ? path_lookupat+0x780/0x780 [ 539.616013] ? trace_hardirqs_on+0x10/0x10 [ 539.620272] do_filp_open+0x179/0x3c0 [ 539.624103] ? may_open_dev+0xe0/0xe0 [ 539.627921] ? __alloc_fd+0x1be/0x490 [ 539.631752] ? lock_downgrade+0x740/0x740 [ 539.636012] ? do_raw_spin_unlock+0x164/0x220 [ 539.640531] ? _raw_spin_unlock+0x29/0x40 [ 539.644704] ? __alloc_fd+0x1be/0x490 [ 539.648526] do_sys_open+0x296/0x410 [ 539.652271] ? filp_open+0x60/0x60 [ 539.655827] ? __do_page_fault+0x159/0xad0 [ 539.660075] ? do_syscall_64+0x4c/0x640 [ 539.664073] ? SyS_open+0x30/0x30 [ 539.667552] do_syscall_64+0x1d5/0x640 [ 539.671473] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 20:24:34 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000080)=0x5f) 20:24:34 executing program 5: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) r2 = getpgid(0x0) sched_rr_get_interval(r2, &(0x7f0000000ac0)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x50) syz_open_procfs$namespace(r2, &(0x7f00000000c0)='ns/uts\x00') lookup_dcookie(0x5, &(0x7f0000000000)=""/91, 0x5b) getpgid(0x0) (async) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) (async) getpgid(0x0) (async) sched_rr_get_interval(r1, &(0x7f0000000ac0)) (async) getpgid(0x0) (async) sched_rr_get_interval(r2, &(0x7f0000000ac0)) (async) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x50) (async) syz_open_procfs$namespace(r2, &(0x7f00000000c0)='ns/uts\x00') (async) lookup_dcookie(0x5, &(0x7f0000000000)=""/91, 0x5b) (async) 20:24:34 executing program 1: fanotify_init(0x40, 0x1) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x210000, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0008070000000000ab090000010000007be374f7e26747f9f6749384ebd22842b45581c6a0aa75fdbbe064f574a1cec373e758229a8aebebc9782e3b58eb42d060e5940a1ed6d15f19523f1bebe3d8585ccf50fa7e206a3e2315e6bdbdfb1e6a4a42f2"], 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x480050}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="ff000000", @ANYRES16=0x0, @ANYBLOB="040027bd7000ffdbdf250200000008000800020000000c000300020000000000000008000400ffffffff08000700", @ANYRES32=r1, @ANYBLOB="0c0003000300000000000000", @ANYRESOCT=r0, @ANYRES8=r2, @ANYRES16=r2, @ANYRESDEC=r4], 0x44}}, 0x4061) fanotify_init(0x20, 0x1) [ 539.676671] RIP: 0033:0x7f61131d6284 [ 539.680391] RSP: 002b:00007f6111796040 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 539.688114] RAX: ffffffffffffffda RBX: 00007f6113343f80 RCX: 00007f61131d6284 [ 539.695391] RDX: 0000000000000002 RSI: 00007f61117960d0 RDI: 00000000ffffff9c [ 539.702671] RBP: 00007f61117960d0 R08: 0000000000000000 R09: 00007f6111795f50 [ 539.709950] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 539.717232] R13: 00007ffc5069065f R14: 00007f6111796300 R15: 0000000000022000 20:24:34 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (fail_nth: 4) 20:24:34 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000000)=0x2) 20:24:34 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040)) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000080)={0x40, 0x778, 0x1}) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) (async) getsockname$packet(r2, &(0x7f0000000000), &(0x7f00000000c0)=0x14) ioctl$PPPIOCUNBRIDGECHAN(r1, 0x7434) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:34 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000080)=0x5f) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000080)=0x5f) (async) 20:24:34 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x810}, 0x11) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x84100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) 20:24:34 executing program 1: getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xc0020, &(0x7f0000000180)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x31f}}, {@max_read={'max_read', 0x3d, 0x1}}, {@allow_other}, {@allow_other}, {@default_permissions}, {@blksize}, {@blksize={'blksize', 0x3d, 0x400}}], [{@smackfshat={'smackfshat', 0x3d, 'ns/time_for_children\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'ns/time_for_children\x00'}}, {@hash}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '-*^@$'}}, {@subj_role={'subj_role', 0x3d, 'ns/time_for_children\x00'}}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@subj_type={'subj_type', 0x3d, 'ns/time_for_children\x00'}}]}}, 0x1, 0x0, &(0x7f0000000380)="7a458bcfca8f3e6cd2287db0e26d96a94d484bf84ae933a34869dbbda0732aa07b0dc494856d4071cd519dbca3810ff350c96925c468ae75ac3a") syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') [ 539.835091] FAULT_INJECTION: forcing a failure. [ 539.835091] name failslab, interval 1, probability 0, space 0, times 0 20:24:34 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x810}, 0x11) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x84100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x800) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x810}, 0x11) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x84100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) (async) [ 539.880407] CPU: 1 PID: 16970 Comm: syz-executor.0 Not tainted 4.14.307-syzkaller #0 [ 539.888458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 539.898449] Call Trace: [ 539.901058] dump_stack+0x1b2/0x281 [ 539.904710] should_fail.cold+0x10a/0x149 [ 539.908879] should_failslab+0xd6/0x130 [ 539.912912] kmem_cache_alloc_trace+0x29a/0x3d0 [ 539.917604] apparmor_file_alloc_security+0x129/0x800 [ 539.922831] security_file_alloc+0x66/0xa0 20:24:34 executing program 1: getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xc0020, &(0x7f0000000180)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x31f}}, {@max_read={'max_read', 0x3d, 0x1}}, {@allow_other}, {@allow_other}, {@default_permissions}, {@blksize}, {@blksize={'blksize', 0x3d, 0x400}}], [{@smackfshat={'smackfshat', 0x3d, 'ns/time_for_children\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'ns/time_for_children\x00'}}, {@hash}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '-*^@$'}}, {@subj_role={'subj_role', 0x3d, 'ns/time_for_children\x00'}}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@subj_type={'subj_type', 0x3d, 'ns/time_for_children\x00'}}]}}, 0x1, 0x0, &(0x7f0000000380)="7a458bcfca8f3e6cd2287db0e26d96a94d484bf84ae933a34869dbbda0732aa07b0dc494856d4071cd519dbca3810ff350c96925c468ae75ac3a") (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') [ 539.927087] ? selinux_is_enabled+0x5/0x50 [ 539.931368] get_empty_filp+0x16b/0x3f0 [ 539.935373] path_openat+0x84/0x2970 [ 539.939101] ? get_pid_task+0x91/0x130 [ 539.943007] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 539.947874] ? path_lookupat+0x780/0x780 [ 539.952073] ? trace_hardirqs_on+0x10/0x10 [ 539.956333] do_filp_open+0x179/0x3c0 [ 539.960171] ? may_open_dev+0xe0/0xe0 [ 539.964075] ? __alloc_fd+0x1be/0x490 [ 539.967898] ? lock_downgrade+0x740/0x740 [ 539.972063] ? do_raw_spin_unlock+0x164/0x220 [ 539.976580] ? _raw_spin_unlock+0x29/0x40 20:24:34 executing program 1: getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xc0020, &(0x7f0000000180)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x31f}}, {@max_read={'max_read', 0x3d, 0x1}}, {@allow_other}, {@allow_other}, {@default_permissions}, {@blksize}, {@blksize={'blksize', 0x3d, 0x400}}], [{@smackfshat={'smackfshat', 0x3d, 'ns/time_for_children\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'ns/time_for_children\x00'}}, {@hash}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '-*^@$'}}, {@subj_role={'subj_role', 0x3d, 'ns/time_for_children\x00'}}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@subj_type={'subj_type', 0x3d, 'ns/time_for_children\x00'}}]}}, 0x1, 0x0, &(0x7f0000000380)="7a458bcfca8f3e6cd2287db0e26d96a94d484bf84ae933a34869dbbda0732aa07b0dc494856d4071cd519dbca3810ff350c96925c468ae75ac3a") syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xc0020, &(0x7f0000000180)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x31f}}, {@max_read={'max_read', 0x3d, 0x1}}, {@allow_other}, {@allow_other}, {@default_permissions}, {@blksize}, {@blksize={'blksize', 0x3d, 0x400}}], [{@smackfshat={'smackfshat', 0x3d, 'ns/time_for_children\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'ns/time_for_children\x00'}}, {@hash}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '-*^@$'}}, {@subj_role={'subj_role', 0x3d, 'ns/time_for_children\x00'}}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@subj_type={'subj_type', 0x3d, 'ns/time_for_children\x00'}}]}}, 0x1, 0x0, &(0x7f0000000380)="7a458bcfca8f3e6cd2287db0e26d96a94d484bf84ae933a34869dbbda0732aa07b0dc494856d4071cd519dbca3810ff350c96925c468ae75ac3a") (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') (async) [ 539.980743] ? __alloc_fd+0x1be/0x490 [ 539.984569] do_sys_open+0x296/0x410 [ 539.988300] ? filp_open+0x60/0x60 [ 539.991859] ? __do_page_fault+0x159/0xad0 [ 539.996109] ? do_syscall_64+0x4c/0x640 [ 540.000096] ? SyS_open+0x30/0x30 [ 540.003564] do_syscall_64+0x1d5/0x640 [ 540.007524] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 540.012730] RIP: 0033:0x7f61131d6284 [ 540.016450] RSP: 002b:00007f6111796040 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 20:24:34 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x810}, 0x11) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x84100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) (rerun: 64) 20:24:34 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (fail_nth: 5) [ 540.024167] RAX: ffffffffffffffda RBX: 00007f6113343f80 RCX: 00007f61131d6284 [ 540.031449] RDX: 0000000000000002 RSI: 00007f61117960d0 RDI: 00000000ffffff9c [ 540.038728] RBP: 00007f61117960d0 R08: 0000000000000000 R09: 00007f6111795f50 [ 540.046007] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 540.053291] R13: 00007ffc5069065f R14: 00007f6111796300 R15: 0000000000022000 20:24:34 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000000)=0x2) 20:24:34 executing program 2: sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="34000010cc6b3e75833a6cc75b65a3d9d77c1c0a8a9c2b427e89ef", @ANYRES16=0x0, @ANYBLOB="00042bb77000a8fc0100631d4605fddbdf25040000000900030073797a300000000014000200766c616e31000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x4008800) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x995]}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x44001}, 0x4080) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0), 0x400880, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x266db4f3cd1509e7}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, 0x1407, 0x20, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x6578bedaaae40c11}, 0x805) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r4, 0x7439) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000280)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0x1, 0xc, 0x2, 0x755, 0x9}, @exit, @ldst={0x3, 0x3, 0x6, 0x9, 0x2, 0x0, 0x10}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff9}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6e7c}, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x500a9059}], &(0x7f0000000300)='GPL\x00', 0x3, 0x3, &(0x7f0000000340)=""/3, 0x40f00, 0x2, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000380)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x1, 0x4, 0x1f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r3, 0xffffffffffffffff, r4, 0xffffffffffffffff]}, 0x80) 20:24:34 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000080)={0x40, 0x778, 0x1}) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) (async) getsockname$packet(r2, &(0x7f0000000000), &(0x7f00000000c0)=0x14) (async) ioctl$PPPIOCUNBRIDGECHAN(r1, 0x7434) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:34 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000200)={0x1, 0x0, {0x35, 0x20, 0x201f, 0x1, 0x3, 0x3, 0x57cb160e21557fd0, 0x5}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 20:24:34 executing program 5: ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x200, 0x4, {0xffffffffffffffff}, {0xee00}, 0x7, 0x3b50}) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/user\x00') [ 540.158328] FAULT_INJECTION: forcing a failure. [ 540.158328] name failslab, interval 1, probability 0, space 0, times 0 [ 540.229505] CPU: 1 PID: 17023 Comm: syz-executor.0 Not tainted 4.14.307-syzkaller #0 [ 540.237432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 540.246796] Call Trace: [ 540.249406] dump_stack+0x1b2/0x281 [ 540.253053] should_fail.cold+0x10a/0x149 [ 540.257232] should_failslab+0xd6/0x130 [ 540.261227] kmem_cache_alloc_trace+0x47/0x3d0 [ 540.265832] proc_self_get_link+0x1af/0x220 [ 540.270172] ? proc_ns_dir_lookup+0x250/0x250 [ 540.274693] link_path_walk+0xc47/0x10a0 [ 540.278780] ? walk_component+0xbc0/0xbc0 [ 540.282943] path_openat+0x15e/0x2970 [ 540.286767] ? get_pid_task+0x91/0x130 [ 540.290672] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 540.295537] ? path_lookupat+0x780/0x780 [ 540.299615] ? trace_hardirqs_on+0x10/0x10 [ 540.303872] do_filp_open+0x179/0x3c0 [ 540.307700] ? may_open_dev+0xe0/0xe0 [ 540.311510] ? do_raw_spin_unlock+0x164/0x220 [ 540.315997] ? __alloc_fd+0x1be/0x490 [ 540.319804] do_sys_open+0x296/0x410 [ 540.323565] ? filp_open+0x60/0x60 [ 540.327120] ? __do_page_fault+0x159/0xad0 [ 540.331389] ? do_syscall_64+0x4c/0x640 [ 540.335366] ? SyS_open+0x30/0x30 [ 540.338821] do_syscall_64+0x1d5/0x640 [ 540.342725] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 540.347914] RIP: 0033:0x7f61131d6284 [ 540.351621] RSP: 002b:00007f6111796040 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 540.359328] RAX: ffffffffffffffda RBX: 00007f6113343f80 RCX: 00007f61131d6284 [ 540.366685] RDX: 0000000000000002 RSI: 00007f61117960d0 RDI: 00000000ffffff9c 20:24:34 executing program 5: ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x200, 0x4, {0xffffffffffffffff}, {0xee00}, 0x7, 0x3b50}) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x200, 0x4, {0xffffffffffffffff}, {0xee00}, 0x7, 0x3b50}) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/user\x00') 20:24:34 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) (async) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000200)={0x1, 0x0, {0x35, 0x20, 0x201f, 0x1, 0x3, 0x3, 0x57cb160e21557fd0, 0x5}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 20:24:34 executing program 2: sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="34000010cc6b3e75833a6cc75b65a3d9d77c1c0a8a9c2b427e89ef", @ANYRES16=0x0, @ANYBLOB="00042bb77000a8fc0100631d4605fddbdf25040000000900030073797a300000000014000200766c616e31000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x4008800) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x995]}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x44001}, 0x4080) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0), 0x400880, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x266db4f3cd1509e7}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, 0x1407, 0x20, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x6578bedaaae40c11}, 0x805) (async, rerun: 32) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 32) ioctl$PPPIOCDISCONN(r3, 0x7439) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r4, 0x7439) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000280)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0x1, 0xc, 0x2, 0x755, 0x9}, @exit, @ldst={0x3, 0x3, 0x6, 0x9, 0x2, 0x0, 0x10}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff9}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6e7c}, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x500a9059}], &(0x7f0000000300)='GPL\x00', 0x3, 0x3, &(0x7f0000000340)=""/3, 0x40f00, 0x2, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000380)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x1, 0x4, 0x1f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r3, 0xffffffffffffffff, r4, 0xffffffffffffffff]}, 0x80) 20:24:34 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000008) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) [ 540.373956] RBP: 00007f61117960d0 R08: 0000000000000000 R09: 00007f6111795f50 [ 540.381231] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 540.388509] R13: 00007ffc5069065f R14: 00007f6111796300 R15: 0000000000022000 20:24:34 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (fail_nth: 6) 20:24:34 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000000)=0x2) 20:24:35 executing program 2: sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="34000010cc6b3e75833a6cc75b65a3d9d77c1c0a8a9c2b427e89ef", @ANYRES16=0x0, @ANYBLOB="00042bb77000a8fc0100631d4605fddbdf25040000000900030073797a300000000014000200766c616e31000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x4008800) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async, rerun: 64) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x995]}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x44001}, 0x4080) (async, rerun: 64) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0), 0x400880, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x266db4f3cd1509e7}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, 0x1407, 0x20, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x6578bedaaae40c11}, 0x805) (async, rerun: 32) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 32) ioctl$PPPIOCDISCONN(r3, 0x7439) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r4, 0x7439) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000280)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0x1, 0xc, 0x2, 0x755, 0x9}, @exit, @ldst={0x3, 0x3, 0x6, 0x9, 0x2, 0x0, 0x10}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff9}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6e7c}, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x500a9059}], &(0x7f0000000300)='GPL\x00', 0x3, 0x3, &(0x7f0000000340)=""/3, 0x40f00, 0x2, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000380)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x1, 0x4, 0x1f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r3, 0xffffffffffffffff, r4, 0xffffffffffffffff]}, 0x80) 20:24:35 executing program 5: ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x200, 0x4, {0xffffffffffffffff}, {0xee00}, 0x7, 0x3b50}) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/user\x00') 20:24:35 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000200)={0x1, 0x0, {0x35, 0x20, 0x201f, 0x1, 0x3, 0x3, 0x57cb160e21557fd0, 0x5}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r2, 0x7439) (async) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000200)={0x1, 0x0, {0x35, 0x20, 0x201f, 0x1, 0x3, 0x3, 0x57cb160e21557fd0, 0x5}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) [ 540.535462] FAULT_INJECTION: forcing a failure. [ 540.535462] name failslab, interval 1, probability 0, space 0, times 0 [ 540.547832] CPU: 1 PID: 17065 Comm: syz-executor.0 Not tainted 4.14.307-syzkaller #0 [ 540.555736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 540.565189] Call Trace: [ 540.567792] dump_stack+0x1b2/0x281 [ 540.571449] should_fail.cold+0x10a/0x149 [ 540.575630] should_failslab+0xd6/0x130 [ 540.579628] kmem_cache_alloc+0x28e/0x3c0 [ 540.583794] ? proc_i_callback+0x20/0x20 [ 540.587878] proc_alloc_inode+0x18/0x1a0 [ 540.591954] ? proc_i_callback+0x20/0x20 [ 540.596027] alloc_inode+0x5d/0x170 [ 540.599668] new_inode+0x1d/0xf0 [ 540.603047] proc_pid_make_inode+0x22/0x230 [ 540.607383] proc_pident_instantiate+0x78/0x280 [ 540.612070] proc_pident_lookup+0x181/0x200 [ 540.616422] lookup_slow+0x20a/0x400 [ 540.620163] ? follow_dotdot_rcu+0xf00/0xf00 [ 540.624593] ? lookup_fast+0x430/0xe30 [ 540.628510] walk_component+0x6a1/0xbc0 [ 540.632500] ? lookup_fast+0xe30/0xe30 [ 540.636411] ? proc_pid_permission+0x181/0x240 [ 540.641011] ? security_inode_permission+0xb5/0xf0 [ 540.645958] ? mem_write+0x60/0x60 [ 540.649613] link_path_walk+0x823/0x10a0 [ 540.653696] ? walk_component+0xbc0/0xbc0 [ 540.657869] path_openat+0x15e/0x2970 [ 540.661688] ? get_pid_task+0x91/0x130 [ 540.665597] ? path_lookupat+0x780/0x780 [ 540.669761] ? trace_hardirqs_on+0x10/0x10 [ 540.674025] do_filp_open+0x179/0x3c0 [ 540.677834] ? may_open_dev+0xe0/0xe0 [ 540.681683] ? simple_attr_release+0x40/0x40 20:24:35 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') write$vhost_msg(0xffffffffffffffff, &(0x7f0000000000)={0x1, {&(0x7f00000002c0)=""/204, 0xcc, &(0x7f00000003c0)=""/208, 0x2, 0x3}}, 0x48) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x6, 0x1, {}, {0xee00}, 0xfffffffffffffffb, 0x6}) [ 540.686106] ? do_raw_spin_unlock+0x164/0x220 [ 540.690638] ? __alloc_fd+0x1be/0x490 [ 540.694599] do_sys_open+0x296/0x410 [ 540.698327] ? filp_open+0x60/0x60 [ 540.701971] ? __do_page_fault+0x159/0xad0 [ 540.706219] ? do_syscall_64+0x4c/0x640 [ 540.710221] ? SyS_open+0x30/0x30 [ 540.713684] do_syscall_64+0x1d5/0x640 [ 540.717585] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 540.722865] RIP: 0033:0x7f61131d6284 [ 540.726582] RSP: 002b:00007f6111796040 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 20:24:35 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x20281, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000000)=0x535dad18) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @private=0xa010102, 0x17, 0x41}}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCDISCONN(r2, 0x7439) 20:24:35 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x6, 0x102) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000200)) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x5c, r0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0xfffffffffffffffb}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000881}, 0x4048000) 20:24:35 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000008) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) [ 540.734303] RAX: ffffffffffffffda RBX: 00007f6113343f80 RCX: 00007f61131d6284 [ 540.741587] RDX: 0000000000000002 RSI: 00007f61117960d0 RDI: 00000000ffffff9c [ 540.748876] RBP: 00007f61117960d0 R08: 0000000000000000 R09: 00007f6111795f50 [ 540.756164] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 540.763447] R13: 00007ffc5069065f R14: 00007f6111796300 R15: 0000000000022000 20:24:35 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') write$vhost_msg(0xffffffffffffffff, &(0x7f0000000000)={0x1, {&(0x7f00000002c0)=""/204, 0xcc, &(0x7f00000003c0)=""/208, 0x2, 0x3}}, 0x48) (async) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x6, 0x1, {}, {0xee00}, 0xfffffffffffffffb, 0x6}) 20:24:35 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0xd, 0x7}}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:35 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000000)={0x1, {&(0x7f00000002c0)=""/204, 0xcc, &(0x7f00000003c0)=""/208, 0x2, 0x3}}, 0x48) (async) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x6, 0x1, {}, {0xee00}, 0xfffffffffffffffb, 0x6}) 20:24:35 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (fail_nth: 7) 20:24:35 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async, rerun: 64) socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x20281, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x3) (async, rerun: 32) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000000)=0x535dad18) (async, rerun: 32) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @private=0xa010102, 0x17, 0x41}}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCDISCONN(r2, 0x7439) 20:24:35 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x6, 0x102) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000200)) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x5c, r0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0xfffffffffffffffb}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000881}, 0x4048000) 20:24:35 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000008) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 20:24:35 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0xd, 0x7}}) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:35 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x1402, 0x800, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) [ 540.983762] FAULT_INJECTION: forcing a failure. [ 540.983762] name failslab, interval 1, probability 0, space 0, times 0 [ 541.041394] CPU: 0 PID: 17136 Comm: syz-executor.0 Not tainted 4.14.307-syzkaller #0 [ 541.049333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 541.058703] Call Trace: [ 541.061337] dump_stack+0x1b2/0x281 [ 541.065001] should_fail.cold+0x10a/0x149 [ 541.069174] should_failslab+0xd6/0x130 [ 541.073171] kmem_cache_alloc+0x28e/0x3c0 [ 541.077364] ? proc_i_callback+0x20/0x20 [ 541.081446] proc_alloc_inode+0x18/0x1a0 [ 541.085542] ? proc_i_callback+0x20/0x20 [ 541.089619] alloc_inode+0x5d/0x170 [ 541.093266] new_inode+0x1d/0xf0 [ 541.096649] proc_pid_make_inode+0x22/0x230 [ 541.101078] proc_pident_instantiate+0x78/0x280 [ 541.105765] proc_pident_lookup+0x181/0x200 [ 541.110104] lookup_slow+0x20a/0x400 [ 541.113848] ? follow_dotdot_rcu+0xf00/0xf00 [ 541.118364] ? lookup_fast+0x430/0xe30 [ 541.123428] walk_component+0x6a1/0xbc0 [ 541.127416] ? lookup_fast+0xe30/0xe30 [ 541.131337] ? proc_pid_permission+0x181/0x240 [ 541.135944] ? security_inode_permission+0xb5/0xf0 [ 541.140887] ? mem_write+0x60/0x60 [ 541.144446] link_path_walk+0x823/0x10a0 [ 541.148708] ? walk_component+0xbc0/0xbc0 [ 541.152882] path_openat+0x15e/0x2970 [ 541.156788] ? get_pid_task+0x91/0x130 [ 541.160695] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 541.165612] ? path_lookupat+0x780/0x780 [ 541.169697] ? trace_hardirqs_on+0x10/0x10 [ 541.174001] do_filp_open+0x179/0x3c0 [ 541.177908] ? may_open_dev+0xe0/0xe0 [ 541.181737] ? simple_attr_release+0x40/0x40 [ 541.186168] ? do_raw_spin_unlock+0x164/0x220 20:24:35 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x6, 0x102) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000200)) (async) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x5c, r0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0xfffffffffffffffb}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000881}, 0x4048000) 20:24:35 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1402, 0x200, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x4010) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000000)=0x800) 20:24:35 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1402, 0x200, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x4010) (async) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1402, 0x200, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x4010) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000000)=0x800) 20:24:35 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) ioctl$PPPIOCDISCONN(r1, 0x7439) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1402, 0x200, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x4010) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000000)=0x800) 20:24:35 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') 20:24:35 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') [ 541.190683] ? __alloc_fd+0x1be/0x490 [ 541.194508] do_sys_open+0x296/0x410 [ 541.198238] ? filp_open+0x60/0x60 [ 541.201804] ? __do_page_fault+0x159/0xad0 [ 541.206055] ? do_syscall_64+0x4c/0x640 [ 541.210041] ? SyS_open+0x30/0x30 [ 541.213507] do_syscall_64+0x1d5/0x640 [ 541.217416] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 541.222638] RIP: 0033:0x7f61131d6284 [ 541.226356] RSP: 002b:00007f6111796040 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 541.234072] RAX: ffffffffffffffda RBX: 00007f6113343f80 RCX: 00007f61131d6284 [ 541.241354] RDX: 0000000000000002 RSI: 00007f61117960d0 RDI: 00000000ffffff9c [ 541.248619] RBP: 00007f61117960d0 R08: 0000000000000000 R09: 00007f6111795f50 [ 541.255888] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 541.263163] R13: 00007ffc5069065f R14: 00007f6111796300 R15: 0000000000022000 20:24:35 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (fail_nth: 8) [ 541.349566] FAULT_INJECTION: forcing a failure. [ 541.349566] name failslab, interval 1, probability 0, space 0, times 0 [ 541.360877] CPU: 0 PID: 17182 Comm: syz-executor.0 Not tainted 4.14.307-syzkaller #0 [ 541.368776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 541.378140] Call Trace: [ 541.380745] dump_stack+0x1b2/0x281 [ 541.384569] should_fail.cold+0x10a/0x149 [ 541.388715] should_failslab+0xd6/0x130 [ 541.392687] kmem_cache_alloc+0x28e/0x3c0 [ 541.396830] getname_flags+0xc8/0x550 [ 541.400625] do_sys_open+0x1ce/0x410 [ 541.404339] ? filp_open+0x60/0x60 [ 541.407882] ? __do_page_fault+0x159/0xad0 [ 541.412381] ? do_syscall_64+0x4c/0x640 [ 541.416350] ? SyS_open+0x30/0x30 [ 541.419800] do_syscall_64+0x1d5/0x640 [ 541.423695] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 541.428876] RIP: 0033:0x7f61131d6284 [ 541.432574] RSP: 002b:00007f6111796040 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 541.440713] RAX: ffffffffffffffda RBX: 00007f6113343f80 RCX: 00007f61131d6284 20:24:35 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') socket$can_raw(0x1d, 0x3, 0x1) (async) socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x20281, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000000)=0x535dad18) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) ioctl$PPPIOCDISCONN(r1, 0x7439) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @private=0xa010102, 0x17, 0x41}}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCDISCONN(r2, 0x7439) 20:24:35 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') 20:24:35 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async, rerun: 32) r0 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x1402, 0x800, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) 20:24:35 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0xd, 0x7}}) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r1, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) 20:24:36 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (fail_nth: 9) [ 541.448062] RDX: 0000000000000000 RSI: 00007f61117960d0 RDI: 00000000ffffff9c [ 541.455333] RBP: 00007f61117960d0 R08: 0000000000000000 R09: 00007f6111795f50 [ 541.462594] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 541.469853] R13: 00007ffc5069065f R14: 00007f6111796300 R15: 0000000000022000 20:24:36 executing program 5: ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000080)) getgid() r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0x8) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/pid\x00') [ 541.561222] FAULT_INJECTION: forcing a failure. [ 541.561222] name failslab, interval 1, probability 0, space 0, times 0 [ 541.573342] CPU: 0 PID: 17198 Comm: syz-executor.0 Not tainted 4.14.307-syzkaller #0 [ 541.581251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 541.590619] Call Trace: [ 541.593227] dump_stack+0x1b2/0x281 [ 541.596884] should_fail.cold+0x10a/0x149 [ 541.601066] should_failslab+0xd6/0x130 [ 541.605060] kmem_cache_alloc+0x28e/0x3c0 20:24:36 executing program 5: ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000080)) getgid() r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0x8) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/pid\x00') ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000080)) (async) getgid() (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) (async) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0x8) (async) getpgid(0x0) (async) sched_rr_get_interval(r1, &(0x7f0000000ac0)) (async) syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/pid\x00') (async) [ 541.609228] getname_flags+0xc8/0x550 [ 541.613048] do_sys_open+0x1ce/0x410 [ 541.616780] ? filp_open+0x60/0x60 [ 541.620333] ? __do_page_fault+0x159/0xad0 [ 541.624578] ? do_syscall_64+0x4c/0x640 [ 541.628560] ? SyS_open+0x30/0x30 [ 541.632028] do_syscall_64+0x1d5/0x640 [ 541.635939] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 541.641135] RIP: 0033:0x7f61131d6284 [ 541.644848] RSP: 002b:00007f6111796040 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 541.652569] RAX: ffffffffffffffda RBX: 00007f6113343f80 RCX: 00007f61131d6284 20:24:36 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') socket$nl_rdma(0x10, 0x3, 0x14) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x1402, 0x800, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) 20:24:36 executing program 2: sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="100000ff31952a78c68e316fcb000c14000426bd7000eedbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x20040080}, 0x20000080) r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xae93d9d376d5572a}, 0x10000) [ 541.659843] RDX: 0000000000000000 RSI: 00007f61117960d0 RDI: 00000000ffffff9c [ 541.667105] RBP: 00007f61117960d0 R08: 0000000000000000 R09: 00007f6111795f50 [ 541.674368] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 541.681632] R13: 00007ffc5069065f R14: 00007f6111796300 R15: 0000000000022000 20:24:36 executing program 5: ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000080)) getgid() (async, rerun: 32) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) (rerun: 32) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0x8) (async) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) (async) syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/pid\x00') 20:24:36 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (fail_nth: 10) 20:24:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r1, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc1) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) 20:24:36 executing program 2: sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="100000ff31952a78c68e316fcb000c14000426bd7000eedbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x20040080}, 0x20000080) (async) r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xae93d9d376d5572a}, 0x10000) 20:24:36 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000080)=@raw=[@generic={0x0, 0x3, 0x9, 0xb645, 0x8}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x65, &(0x7f0000000140)=""/101, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0, 0x1, 0x1, r1]}, 0x80) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 20:24:36 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) socket$inet_udp(0x2, 0x2, 0x0) 20:24:36 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, 0x1407, 0x100, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x890) r4 = getpgid(0x0) sched_rr_get_interval(r4, &(0x7f0000000ac0)) nanosleep(&(0x7f0000000240), &(0x7f0000000280)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000040)='ns/pid_for_children\x00') r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000200)=0x2) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000000714080028bd7000fbdbdf25080001000000000008000100020000000900020073797a310000000008004400", @ANYRES32=r5, @ANYBLOB="fb614705008ad000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4040801) 20:24:36 executing program 2: sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="100000ff31952a78c68e316fcb000c14000426bd7000eedbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x20040080}, 0x20000080) r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xae93d9d376d5572a}, 0x10000) 20:24:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r1, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)) (async, rerun: 32) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) (rerun: 32) [ 541.857763] FAULT_INJECTION: forcing a failure. [ 541.857763] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 541.869605] CPU: 1 PID: 17240 Comm: syz-executor.0 Not tainted 4.14.307-syzkaller #0 [ 541.877523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 541.886888] Call Trace: [ 541.889491] dump_stack+0x1b2/0x281 [ 541.893147] should_fail.cold+0x10a/0x149 [ 541.897409] ? is_bpf_text_address+0xb8/0x150 [ 541.901921] __alloc_pages_nodemask+0x21e/0x2900 [ 541.906692] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 541.912076] ? __lock_acquire+0x5fc/0x3f20 [ 541.916416] ? kasan_slab_free+0xc3/0x1a0 [ 541.920577] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 541.925456] ? do_syscall_64+0x1d5/0x640 [ 541.929549] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 541.934940] ? lock_acquire+0x170/0x3f0 [ 541.938935] ? lock_downgrade+0x740/0x740 [ 541.943112] cache_grow_begin+0x91/0x700 [ 541.947188] ? fs_reclaim_release+0xd0/0x110 [ 541.951613] ? check_preemption_disabled+0x35/0x240 [ 541.956650] cache_alloc_refill+0x273/0x350 [ 541.961076] kmem_cache_alloc+0x333/0x3c0 [ 541.965246] getname_flags+0xc8/0x550 [ 541.969065] do_sys_open+0x1ce/0x410 [ 541.972806] ? filp_open+0x60/0x60 [ 541.976361] ? __do_page_fault+0x159/0xad0 [ 541.980609] ? do_syscall_64+0x4c/0x640 [ 541.984601] ? SyS_open+0x30/0x30 [ 541.988077] do_syscall_64+0x1d5/0x640 [ 541.991984] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 541.997177] RIP: 0033:0x7f61131d6284 [ 542.000968] RSP: 002b:00007f6111796040 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 20:24:36 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, 0x1407, 0x100, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x890) r4 = getpgid(0x0) sched_rr_get_interval(r4, &(0x7f0000000ac0)) nanosleep(&(0x7f0000000240), &(0x7f0000000280)) (async) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000040)='ns/pid_for_children\x00') (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000200)=0x2) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000000714080028bd7000fbdbdf25080001000000000008000100020000000900020073797a310000000008004400", @ANYRES32=r5, @ANYBLOB="fb614705008ad000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4040801) 20:24:36 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) ioctl$PPPIOCDISCONN(r1, 0x7439) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000080)=@raw=[@generic={0x0, 0x3, 0x9, 0xb645, 0x8}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x65, &(0x7f0000000140)=""/101, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0, 0x1, 0x1, r1]}, 0x80) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 542.008683] RAX: ffffffffffffffda RBX: 00007f6113343f80 RCX: 00007f61131d6284 [ 542.015965] RDX: 0000000000000000 RSI: 00007f61117960d0 RDI: 00000000ffffff9c [ 542.023229] RBP: 00007f61117960d0 R08: 0000000000000000 R09: 00007f6111795f50 [ 542.030510] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 542.037783] R13: 00007ffc5069065f R14: 00007f6111796300 R15: 0000000000022000 20:24:36 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, 0x1407, 0x100, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x890) r4 = getpgid(0x0) sched_rr_get_interval(r4, &(0x7f0000000ac0)) (async) nanosleep(&(0x7f0000000240), &(0x7f0000000280)) (async) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000040)='ns/pid_for_children\x00') r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000200)=0x2) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000000714080028bd7000fbdbdf25080001000000000008000100020000000900020073797a310000000008004400", @ANYRES32=r5, @ANYBLOB="fb614705008ad000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4040801) 20:24:36 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (fail_nth: 11) 20:24:36 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0), 0x1c1800, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x78, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9d2}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r6}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, 'ns/user\x00'}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r3}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x81}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680), r5) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, r9, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x94}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000c41}, 0x14) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r8, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xdad}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40812) socket$nl_rdma(0x10, 0x3, 0x14) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r3) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r11, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r10, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}]}, 0x1c}}, 0x800) r12 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r12, 0x7439) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r12, 0xc0286405, &(0x7f0000000200)={0xc79, 0x7ff, {r13}, {0xee00}, 0xdbb8}) syz_open_procfs$namespace(r2, &(0x7f0000000100)='ns/user\x00') ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0]}) 20:24:36 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (async) socket$inet_udp(0x2, 0x2, 0x0) 20:24:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:36 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='tunl0\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00', @ANYRES32=0x0, @ANYBLOB="00070010000000000000b16a4a0100e80064000001049078ac1414aaffffffff8907c1ac1414aa4454acb37f000001000000067f00000100000002e0000002fffffffa0a01010200000002ac1414aa000001ff00000000000000010000000000000401640101014da1a702ac1414bb0000fce1e0000001000000874408551000000000940401000044142d91ac1414aa00000004e000000200000008071391e00000017f00000100000000ac1e0101004444f4330000000000000000ffffffff00000001ffffffff66c67e82ffffffff00000087ac1414aa2e4b8597ac141419000007ffac1e010100000005e000000200000002"]}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x6, 0x0}, 0x8) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r4, 0x7439) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, 0x140c, 0x100, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x405}, 0x20008040) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000480), r3) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r7, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x8000) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r8, 0x7439) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000040)=@raw=[@alu={0x7, 0x0, 0x5, 0x9, 0x5, 0x20}], &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f0000000800)=""/4096, 0x40f00, 0xf, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x4, 0x3, 0x81}, 0x10, r2, 0x0, 0x0, &(0x7f0000000380)=[r3, 0xffffffffffffffff, r4, r8]}, 0x80) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x4) [ 542.133694] FAULT_INJECTION: forcing a failure. [ 542.133694] name failslab, interval 1, probability 0, space 0, times 0 20:24:36 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) (async, rerun: 32) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 32) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000080)=@raw=[@generic={0x0, 0x3, 0x9, 0xb645, 0x8}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x65, &(0x7f0000000140)=""/101, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0, 0x1, 0x1, r1]}, 0x80) (async, rerun: 64) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (rerun: 64) 20:24:36 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0), 0x1c1800, 0x0) (async) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0), 0x1c1800, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x78, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9d2}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r6}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, 'ns/user\x00'}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r3}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x81}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680), r5) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, r9, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x94}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000c41}, 0x14) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r8, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xdad}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40812) (async) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r8, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xdad}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40812) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_rdma(0x10, 0x3, 0x14) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r3) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r11, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r10, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}]}, 0x1c}}, 0x800) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r10, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}]}, 0x1c}}, 0x800) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r12 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r12, 0x7439) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r12, 0xc0286405, &(0x7f0000000200)={0xc79, 0x7ff, {r13}, {0xee00}, 0xdbb8}) syz_open_procfs$namespace(r2, &(0x7f0000000100)='ns/user\x00') ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0]}) [ 542.220354] CPU: 1 PID: 17270 Comm: syz-executor.0 Not tainted 4.14.307-syzkaller #0 [ 542.228542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 542.237907] Call Trace: [ 542.240513] dump_stack+0x1b2/0x281 [ 542.244168] should_fail.cold+0x10a/0x149 [ 542.248336] should_failslab+0xd6/0x130 [ 542.252339] kmem_cache_alloc+0x28e/0x3c0 [ 542.256512] get_empty_filp+0x86/0x3f0 [ 542.260420] path_openat+0x84/0x2970 [ 542.264150] ? kasan_slab_free+0xc3/0x1a0 20:24:36 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080)={0xffffffffffffffff}, 0x4, {0xa, 0x4e20, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) [ 542.268316] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 542.273177] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 542.278559] ? path_lookupat+0x780/0x780 [ 542.282664] ? trace_hardirqs_on+0x10/0x10 [ 542.286919] do_filp_open+0x179/0x3c0 [ 542.290735] ? may_open_dev+0xe0/0xe0 [ 542.294544] ? __alloc_fd+0x1be/0x490 [ 542.298363] ? lock_downgrade+0x740/0x740 [ 542.302624] ? do_raw_spin_unlock+0x164/0x220 [ 542.307145] ? _raw_spin_unlock+0x29/0x40 [ 542.311310] ? __alloc_fd+0x1be/0x490 [ 542.315132] do_sys_open+0x296/0x410 20:24:36 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080)={0xffffffffffffffff}, 0x4, {0xa, 0x4e20, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) [ 542.318862] ? filp_open+0x60/0x60 [ 542.322422] ? __do_page_fault+0x159/0xad0 [ 542.326667] ? do_syscall_64+0x4c/0x640 [ 542.330651] ? SyS_open+0x30/0x30 [ 542.334118] do_syscall_64+0x1d5/0x640 [ 542.338026] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 542.343233] RIP: 0033:0x7f61131d6284 [ 542.346951] RSP: 002b:00007f6111796040 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 542.354671] RAX: ffffffffffffffda RBX: 00007f6113343f80 RCX: 00007f61131d6284 [ 542.361950] RDX: 0000000000000000 RSI: 00007f61117960d0 RDI: 00000000ffffff9c 20:24:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) 20:24:36 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) (async, rerun: 32) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0), 0x1c1800, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x78, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9d2}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r6}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, 'ns/user\x00'}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r3}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x81}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680), r5) (async) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, r9, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x94}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000c41}, 0x14) (async) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r8, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xdad}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40812) socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 64) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r3) (rerun: 64) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r11, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r10, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}]}, 0x1c}}, 0x800) (async, rerun: 64) r12 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r12, 0x7439) (async, rerun: 64) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) (rerun: 64) ioctl$DRM_IOCTL_GET_CLIENT(r12, 0xc0286405, &(0x7f0000000200)={0xc79, 0x7ff, {r13}, {0xee00}, 0xdbb8}) (async) syz_open_procfs$namespace(r2, &(0x7f0000000100)='ns/user\x00') (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0]}) 20:24:36 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='tunl0\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00', @ANYRES32=0x0, @ANYBLOB="00070010000000000000b16a4a0100e80064000001049078ac1414aaffffffff8907c1ac1414aa4454acb37f000001000000067f00000100000002e0000002fffffffa0a01010200000002ac1414aa000001ff00000000000000010000000000000401640101014da1a702ac1414bb0000fce1e0000001000000874408551000000000940401000044142d91ac1414aa00000004e000000200000008071391e00000017f00000100000000ac1e0101004444f4330000000000000000ffffffff00000001ffffffff66c67e82ffffffff00000087ac1414aa2e4b8597ac141419000007ffac1e010100000005e000000200000002"]}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x6, 0x0}, 0x8) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r4, 0x7439) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, 0x140c, 0x100, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x405}, 0x20008040) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, 0x140c, 0x100, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x405}, 0x20008040) syz_genetlink_get_family_id$smc(&(0x7f0000000480), r3) (async) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000480), r3) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r7, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x8000) (async) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r7, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x8000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r8, 0x7439) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000040)=@raw=[@alu={0x7, 0x0, 0x5, 0x9, 0x5, 0x20}], &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f0000000800)=""/4096, 0x40f00, 0xf, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x4, 0x3, 0x81}, 0x10, r2, 0x0, 0x0, &(0x7f0000000380)=[r3, 0xffffffffffffffff, r4, r8]}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000040)=@raw=[@alu={0x7, 0x0, 0x5, 0x9, 0x5, 0x20}], &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f0000000800)=""/4096, 0x40f00, 0xf, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x4, 0x3, 0x81}, 0x10, r2, 0x0, 0x0, &(0x7f0000000380)=[r3, 0xffffffffffffffff, r4, r8]}, 0x80) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x4) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x4) [ 542.369251] RBP: 00007f61117960d0 R08: 0000000000000000 R09: 00007f6111795f50 [ 542.376532] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 542.383815] R13: 00007ffc5069065f R14: 00007f6111796300 R15: 0000000000022000 20:24:36 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (fail_nth: 12) 20:24:36 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080)={0xffffffffffffffff}, 0x4, {0xa, 0x4e20, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) 20:24:36 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (async) socket$inet_udp(0x2, 0x2, 0x0) 20:24:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') [ 542.507503] FAULT_INJECTION: forcing a failure. [ 542.507503] name failslab, interval 1, probability 0, space 0, times 0 20:24:37 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) accept$phonet_pipe(r1, &(0x7f0000000280), &(0x7f00000002c0)=0x10) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000240)={0x3}) write$vhost_msg_v2(r0, &(0x7f00000001c0)={0x2, 0x0, {&(0x7f0000000040)=""/51, 0x33, &(0x7f0000000080)=""/91, 0x1, 0x1}}, 0x48) 20:24:37 executing program 5: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/user\x00') [ 542.556833] CPU: 0 PID: 17321 Comm: syz-executor.0 Not tainted 4.14.307-syzkaller #0 [ 542.564776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 542.574141] Call Trace: [ 542.576744] dump_stack+0x1b2/0x281 [ 542.580394] should_fail.cold+0x10a/0x149 [ 542.584567] should_failslab+0xd6/0x130 [ 542.588566] kmem_cache_alloc_trace+0x29a/0x3d0 [ 542.593268] apparmor_file_alloc_security+0x129/0x800 [ 542.598487] security_file_alloc+0x66/0xa0 [ 542.602734] ? selinux_is_enabled+0x5/0x50 20:24:37 executing program 5: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/user\x00') [ 542.606986] get_empty_filp+0x16b/0x3f0 [ 542.610974] path_openat+0x84/0x2970 [ 542.614702] ? kasan_slab_free+0xc3/0x1a0 [ 542.618877] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 542.623738] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 542.629126] ? path_lookupat+0x780/0x780 [ 542.633297] ? trace_hardirqs_on+0x10/0x10 [ 542.637567] do_filp_open+0x179/0x3c0 [ 542.641383] ? may_open_dev+0xe0/0xe0 [ 542.645197] ? __alloc_fd+0x1be/0x490 [ 542.649019] ? lock_downgrade+0x740/0x740 20:24:37 executing program 5: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async, rerun: 64) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/user\x00') (rerun: 64) [ 542.653203] ? do_raw_spin_unlock+0x164/0x220 [ 542.657728] ? _raw_spin_unlock+0x29/0x40 [ 542.661897] ? __alloc_fd+0x1be/0x490 [ 542.665723] do_sys_open+0x296/0x410 [ 542.669453] ? filp_open+0x60/0x60 [ 542.673098] ? __do_page_fault+0x159/0xad0 [ 542.677350] ? do_syscall_64+0x4c/0x640 [ 542.681333] ? SyS_open+0x30/0x30 [ 542.684937] do_syscall_64+0x1d5/0x640 [ 542.688838] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 542.694029] RIP: 0033:0x7f61131d6284 [ 542.697734] RSP: 002b:00007f6111796040 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 20:24:37 executing program 1: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/user\x00') clock_gettime(0x1, &(0x7f0000000000)) 20:24:37 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) accept$phonet_pipe(r1, &(0x7f0000000280), &(0x7f00000002c0)=0x10) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000240)={0x3}) (async) write$vhost_msg_v2(r0, &(0x7f00000001c0)={0x2, 0x0, {&(0x7f0000000040)=""/51, 0x33, &(0x7f0000000080)=""/91, 0x1, 0x1}}, 0x48) [ 542.705447] RAX: ffffffffffffffda RBX: 00007f6113343f80 RCX: 00007f61131d6284 [ 542.712710] RDX: 0000000000000000 RSI: 00007f61117960d0 RDI: 00000000ffffff9c [ 542.719972] RBP: 00007f61117960d0 R08: 0000000000000000 R09: 00007f6111795f50 [ 542.727327] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 542.734677] R13: 00007ffc5069065f R14: 00007f6111796300 R15: 0000000000022000 20:24:37 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='tunl0\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00', @ANYRES32=0x0, @ANYBLOB="00070010000000000000b16a4a0100e80064000001049078ac1414aaffffffff8907c1ac1414aa4454acb37f000001000000067f00000100000002e0000002fffffffa0a01010200000002ac1414aa000001ff00000000000000010000000000000401640101014da1a702ac1414bb0000fce1e0000001000000874408551000000000940401000044142d91ac1414aa00000004e000000200000008071391e00000017f00000100000000ac1e0101004444f4330000000000000000ffffffff00000001ffffffff66c67e82ffffffff00000087ac1414aa2e4b8597ac141419000007ffac1e010100000005e000000200000002"]}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x6, 0x0}, 0x8) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r4, 0x7439) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, 0x140c, 0x100, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x405}, 0x20008040) (async) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000480), r3) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r7, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x8000) (async) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r8, 0x7439) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000040)=@raw=[@alu={0x7, 0x0, 0x5, 0x9, 0x5, 0x20}], &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f0000000800)=""/4096, 0x40f00, 0xf, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x4, 0x3, 0x81}, 0x10, r2, 0x0, 0x0, &(0x7f0000000380)=[r3, 0xffffffffffffffff, r4, r8]}, 0x80) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x4) 20:24:37 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x242100, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:37 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (fail_nth: 13) 20:24:37 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async, rerun: 64) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) accept$phonet_pipe(r1, &(0x7f0000000280), &(0x7f00000002c0)=0x10) (async, rerun: 32) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 32) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000240)={0x3}) write$vhost_msg_v2(r0, &(0x7f00000001c0)={0x2, 0x0, {&(0x7f0000000040)=""/51, 0x33, &(0x7f0000000080)=""/91, 0x1, 0x1}}, 0x48) 20:24:37 executing program 1: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/user\x00') (async) clock_gettime(0x1, &(0x7f0000000000)) 20:24:37 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') 20:24:37 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x242100, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:37 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x2}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000140)={0x5, 0x1ff, 0x7, 0x9}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x0, r2}) 20:24:37 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') 20:24:37 executing program 1: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/user\x00') clock_gettime(0x1, &(0x7f0000000000)) getpgid(0x0) (async) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/user\x00') (async) clock_gettime(0x1, &(0x7f0000000000)) (async) [ 542.962806] FAULT_INJECTION: forcing a failure. [ 542.962806] name failslab, interval 1, probability 0, space 0, times 0 [ 543.013490] CPU: 1 PID: 17380 Comm: syz-executor.0 Not tainted 4.14.307-syzkaller #0 [ 543.021414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 543.030781] Call Trace: [ 543.033385] dump_stack+0x1b2/0x281 [ 543.037030] should_fail.cold+0x10a/0x149 [ 543.041200] should_failslab+0xd6/0x130 [ 543.045196] kmem_cache_alloc_trace+0x47/0x3d0 [ 543.049805] proc_self_get_link+0x1af/0x220 [ 543.054181] ? proc_ns_dir_lookup+0x250/0x250 [ 543.058697] link_path_walk+0xc47/0x10a0 20:24:37 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') 20:24:37 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') (async) [ 543.062787] ? walk_component+0xbc0/0xbc0 [ 543.066965] path_openat+0x15e/0x2970 [ 543.070780] ? kasan_slab_free+0xc3/0x1a0 [ 543.074939] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 543.079814] ? path_lookupat+0x780/0x780 [ 543.083893] ? trace_hardirqs_on+0x10/0x10 [ 543.088154] do_filp_open+0x179/0x3c0 [ 543.091975] ? may_open_dev+0xe0/0xe0 [ 543.095806] ? do_raw_spin_unlock+0x164/0x220 [ 543.100318] ? __alloc_fd+0x1be/0x490 [ 543.104147] do_sys_open+0x296/0x410 [ 543.107888] ? filp_open+0x60/0x60 20:24:37 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x135001, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) r1 = getpgid(0xffffffffffffffff) r2 = getpgrp(r1) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/user\x00') 20:24:37 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') [ 543.111445] ? __do_page_fault+0x159/0xad0 [ 543.115696] ? do_syscall_64+0x4c/0x640 [ 543.119771] ? SyS_open+0x30/0x30 [ 543.123240] do_syscall_64+0x1d5/0x640 [ 543.127160] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 543.132358] RIP: 0033:0x7f61131d6284 [ 543.136074] RSP: 002b:00007f6111796040 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 543.143795] RAX: ffffffffffffffda RBX: 00007f6113343f80 RCX: 00007f61131d6284 [ 543.151080] RDX: 0000000000000000 RSI: 00007f61117960d0 RDI: 00000000ffffff9c [ 543.158362] RBP: 00007f61117960d0 R08: 0000000000000000 R09: 00007f6111795f50 [ 543.165644] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 543.172934] R13: 00007ffc5069065f R14: 00007f6111796300 R15: 0000000000022000 20:24:37 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (fail_nth: 14) 20:24:37 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:37 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x2}) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) (async, rerun: 64) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000140)={0x5, 0x1ff, 0x7, 0x9}) (async, rerun: 64) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x0, r2}) 20:24:37 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x242100, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x242100, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (async) 20:24:37 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') 20:24:37 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x135001, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) r1 = getpgid(0xffffffffffffffff) r2 = getpgrp(r1) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/user\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x135001, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) (async) getpgid(0xffffffffffffffff) (async) getpgrp(r1) (async) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/user\x00') (async) 20:24:37 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) 20:24:37 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1407, 0x1, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0xc008}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x492d40, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x1409, 0x110, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0xf257f406d5c1f4af}, 0x40010) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r2) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r4, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8004) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x408c1) [ 543.323937] FAULT_INJECTION: forcing a failure. [ 543.323937] name failslab, interval 1, probability 0, space 0, times 0 [ 543.341946] CPU: 1 PID: 17424 Comm: syz-executor.0 Not tainted 4.14.307-syzkaller #0 [ 543.349877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 543.359339] Call Trace: [ 543.361946] dump_stack+0x1b2/0x281 [ 543.365592] should_fail.cold+0x10a/0x149 [ 543.369758] should_failslab+0xd6/0x130 [ 543.373749] kmem_cache_alloc+0x28e/0x3c0 [ 543.377926] __d_alloc+0x2a/0xa20 [ 543.381401] d_alloc+0x46/0x240 [ 543.384716] d_alloc_parallel+0xd6/0x16b0 [ 543.388887] ? lock_acquire+0x170/0x3f0 [ 543.392972] ? lock_downgrade+0x740/0x740 [ 543.397143] ? __d_lookup_rcu+0x640/0x640 [ 543.401306] ? mark_held_locks+0xa6/0xf0 [ 543.405380] ? d_lookup+0x172/0x220 [ 543.409025] ? d_lookup+0x156/0x220 [ 543.412689] lookup_open+0x462/0x1750 [ 543.416514] ? vfs_mkdir+0x6e0/0x6e0 [ 543.420252] path_openat+0x14bb/0x2970 20:24:37 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1407, 0x1, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0xc008}, 0x90) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x492d40, 0x0) (async, rerun: 64) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x1409, 0x110, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0xf257f406d5c1f4af}, 0x40010) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r2) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r4, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8004) (async) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x408c1) [ 543.424160] ? path_lookupat+0x780/0x780 [ 543.428230] ? trace_hardirqs_on+0x10/0x10 [ 543.432484] do_filp_open+0x179/0x3c0 [ 543.436319] ? may_open_dev+0xe0/0xe0 [ 543.440134] ? simple_attr_release+0x40/0x40 [ 543.444551] ? do_raw_spin_unlock+0x164/0x220 [ 543.449052] ? __alloc_fd+0x1be/0x490 [ 543.452880] do_sys_open+0x296/0x410 [ 543.456613] ? filp_open+0x60/0x60 [ 543.460188] ? __do_page_fault+0x159/0xad0 [ 543.464432] ? do_syscall_64+0x4c/0x640 [ 543.468422] ? SyS_open+0x30/0x30 [ 543.471886] do_syscall_64+0x1d5/0x640 [ 543.475793] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 543.480990] RIP: 0033:0x7f61131d6284 [ 543.484712] RSP: 002b:00007f6111796040 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 543.492431] RAX: ffffffffffffffda RBX: 00007f6113343f80 RCX: 00007f61131d6284 [ 543.499710] RDX: 0000000000000000 RSI: 00007f61117960d0 RDI: 00000000ffffff9c [ 543.506990] RBP: 00007f61117960d0 R08: 0000000000000000 R09: 00007f6111795f50 [ 543.514270] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 20:24:38 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:38 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x2}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) (async) ioctl$PPPIOCDISCONN(r3, 0x7439) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000140)={0x5, 0x1ff, 0x7, 0x9}) (async) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000140)={0x5, 0x1ff, 0x7, 0x9}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x0, r2}) 20:24:38 executing program 3: syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCDISCONN(r0, 0x7439) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x400}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4800) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000000)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) [ 543.521550] R13: 00007ffc5069065f R14: 00007f6111796300 R15: 0000000000022000 20:24:38 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (fail_nth: 15) 20:24:38 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x135001, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) (async) r1 = getpgid(0xffffffffffffffff) r2 = getpgrp(r1) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/user\x00') 20:24:38 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1404, 0x400, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c040}, 0x8004) 20:24:38 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1407, 0x1, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0xc008}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x492d40, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x1409, 0x110, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0xf257f406d5c1f4af}, 0x40010) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r2) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r4, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8004) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x408c1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1407, 0x1, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0xc008}, 0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x492d40, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x1409, 0x110, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0xf257f406d5c1f4af}, 0x40010) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r2) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r4, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8004) (async) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x408c1) (async) 20:24:38 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x35d840, 0x0) inotify_init() r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x123280, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xprtrdma_marshal_failed\x00', r2}, 0x10) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000000)=0x5) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0x1f) 20:24:38 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000040)=0x8) 20:24:38 executing program 3: syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x400}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4800) (async) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000000)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:38 executing program 5: ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x4140, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x1412, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x18}}, 0x480) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="000126bd7000ffdbdf25010000000c000300030000000000000008000100", @ANYRES32=r2, @ANYBLOB="08000400e000000208000900040000000800020000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x840) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x81}, 0x44881) 20:24:38 executing program 1: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/user\x00') r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000080)={{0x1, @name="1feb7fcac3ba1c0622f90baccd2f79cc3af44d633f6715ce8c8e74ef5e8d7e96"}, 0x8, 0x100, 0x5}) 20:24:38 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1404, 0x400, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c040}, 0x8004) (rerun: 64) 20:24:38 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000040)=0x8) (async) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000040)=0x8) 20:24:38 executing program 5: ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000000)) (async) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x4140, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x1412, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x18}}, 0x480) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x1412, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x18}}, 0x480) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="000126bd7000ffdbdf25010000000c000300030000000000000008000100", @ANYRES32=r2, @ANYBLOB="08000400e000000208000900040000000800020000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x840) (async) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="000126bd7000ffdbdf25010000000c000300030000000000000008000100", @ANYRES32=r2, @ANYBLOB="08000400e000000208000900040000000800020000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x840) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x81}, 0x44881) 20:24:38 executing program 1: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/user\x00') (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000080)={{0x1, @name="1feb7fcac3ba1c0622f90baccd2f79cc3af44d633f6715ce8c8e74ef5e8d7e96"}, 0x8, 0x100, 0x5}) 20:24:38 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x35d840, 0x0) (async) inotify_init() r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x123280, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xprtrdma_marshal_failed\x00', r2}, 0x10) (async) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000000)=0x5) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0x1f) 20:24:38 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000040)=0x8) 20:24:38 executing program 3: syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCDISCONN(r0, 0x7439) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x400}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4800) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000000)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x400}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4800) (async) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000000)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (async) 20:24:38 executing program 5: ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000000)) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async, rerun: 64) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x4140, 0x0) (rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x1412, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x18}}, 0x480) (async) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="000126bd7000ffdbdf25010000000c000300030000000000000008000100", @ANYRES32=r2, @ANYBLOB="08000400e000000208000900040000000800020000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x840) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x81}, 0x44881) 20:24:38 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1404, 0x400, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c040}, 0x8004) 20:24:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') 20:24:38 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x35d840, 0x0) inotify_init() (async) inotify_init() r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x123280, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) (async) ioctl$PPPIOCDISCONN(r2, 0x7439) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xprtrdma_marshal_failed\x00', r2}, 0x10) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000000)=0x5) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0x1f) 20:24:38 executing program 1: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/user\x00') r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000080)={{0x1, @name="1feb7fcac3ba1c0622f90baccd2f79cc3af44d633f6715ce8c8e74ef5e8d7e96"}, 0x8, 0x100, 0x5}) getpgid(0x0) (async) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/user\x00') (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000080)={{0x1, @name="1feb7fcac3ba1c0622f90baccd2f79cc3af44d633f6715ce8c8e74ef5e8d7e96"}, 0x8, 0x100, 0x5}) (async) 20:24:38 executing program 2: sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0xc015}, 0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:38 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:38 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x420000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000000)=0x40) 20:24:38 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x140c, 0x2, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000400}, 0x90) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r1) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x400, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x54001}, 0x20000000) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000140)=""/33) 20:24:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) 20:24:38 executing program 2: sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0xc015}, 0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:38 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400877c33d2dc5ca9dae4a65041f5c755bfc88fd4de7f214ebc1d779a2b50a643e0d39635399d3d5a7fbe8ce69f7d22fba418c761f3faba8e42f019a31d0f5c689847542980d9d42e0b67c328fa2ea05daba3006b3d7f44214b14453d782d521f4c99d077ec70aae2dedf61db27173d3e376135c587527442ea98a9ddf9727d53513fb2c2ae450f3f6482c1b97128ef73d2405fa3f3e7fac439aa8a69bafd512af86ea6d5641c17201eb3b793514a616c24056b6e4b6513f6787e9b1b50aef16a1d3038155cac06a092ac6933793ac2b25be43c9a4245ebc8931e59ee2ab1f921452ee7a195dfedf2dfc77f3c4c979b82f73d86cd72057033cd6dbf38e5bbeaea115e921bf4b8612bab3af23cfb36bc60788c4740532f6dbcf022d6d9f9d57cb915e5c48ab9f5987b2386101de244b1196596dc925697857d7abf72ae8e51f80eb5f4b993f1ba7dcf67974ceea950036949ea070c75610b78f7e0724d1f9486c0a164bf3854374efff7ab5e3c549343", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') 20:24:38 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x501, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000080)=0x8) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000100)) 20:24:38 executing program 5: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x140c, 0x2, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000400}, 0x90) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) ioctl$PPPIOCDISCONN(r1, 0x7439) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r1) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x400, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x54001}, 0x20000000) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000140)=""/33) 20:24:38 executing program 2: sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0xc015}, 0x4) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:38 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x420000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000000)=0x40) 20:24:38 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x140c, 0x2, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000400}, 0x90) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x140c, 0x2, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000400}, 0x90) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) ioctl$PPPIOCDISCONN(r1, 0x7439) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r1) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x400, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x54001}, 0x20000000) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000140)=""/33) 20:24:38 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x501, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000080)=0x8) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000100)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x501, 0x0) (async) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000080)=0x8) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)) (async) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000100)) (async) 20:24:38 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:38 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x70bd2a}, 0x14}}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x20040000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x2, 0x4, 0x2, 0x6}]}) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1402, 0x4, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x24008000) 20:24:38 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@local, 0x1, 0x0, 0x50, 0x0, [{@initdev}, {@multicast1}, {@initdev}, {@broadcast}, {@dev}]}}) 20:24:38 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xb0, 0x1403, 0x0, 0x70bd2b, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}]}, 0xb0}}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:38 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x420000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000000)=0x40) 20:24:38 executing program 5: ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000)) getpgid(0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) getpgrp(0x0) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) r2 = getpid() syz_open_procfs$namespace(r2, &(0x7f00000000c0)='ns/cgroup\x00') sched_rr_get_interval(r1, &(0x7f0000000ac0)) getpgid(r0) 20:24:38 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@local, 0x1, 0x0, 0x50, 0x0, [{@initdev}, {@multicast1}, {@initdev}, {@broadcast}, {@dev}]}}) 20:24:38 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x70bd2a}, 0x14}}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x20040000) (async) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x20040000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) (async) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x2, 0x4, 0x2, 0x6}]}) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1402, 0x4, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x24008000) 20:24:38 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x501, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000080)=0x8) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000100)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x501, 0x0) (async) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000080)=0x8) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)) (async) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000100)) (async) 20:24:38 executing program 5: ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000)) (async) getpgid(0x0) (async, rerun: 64) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) (async, rerun: 64) r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) getpgrp(0x0) (async) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) (async) r2 = getpid() syz_open_procfs$namespace(r2, &(0x7f00000000c0)='ns/cgroup\x00') (async, rerun: 32) sched_rr_get_interval(r1, &(0x7f0000000ac0)) (async, rerun: 32) getpgid(r0) 20:24:38 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@local, 0x1, 0x0, 0x50, 0x0, [{@initdev}, {@multicast1}, {@initdev}, {@broadcast}, {@dev}]}}) 20:24:38 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xb0, 0x1403, 0x0, 0x70bd2b, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}]}, 0xb0}}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:38 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x70bd2a}, 0x14}}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x20040000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x2, 0x4, 0x2, 0x6}]}) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1402, 0x4, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x24008000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x70bd2a}, 0x14}}, 0x0) (async) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x20040000) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r2, 0x7439) (async) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x2, 0x4, 0x2, 0x6}]}) (async) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1402, 0x4, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x24008000) (async) 20:24:38 executing program 4: sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0xa814) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000280)={0x23, 0x48, 0x20, 0x7f}, 0x10) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000140)=0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x54000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x1) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:38 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40081) fanotify_init(0x40, 0x800) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1000000001140000000000dd00000000"], 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1407, 0x800, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x0) 20:24:38 executing program 5: ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000)) getpgid(0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) getpgrp(0x0) (async) getpgrp(0x0) getpgid(0x0) (async) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) (async) sched_rr_get_interval(r1, &(0x7f0000000ac0)) getpid() (async) r2 = getpid() syz_open_procfs$namespace(r2, &(0x7f00000000c0)='ns/cgroup\x00') sched_rr_get_interval(r1, &(0x7f0000000ac0)) getpgid(r0) 20:24:38 executing program 4: sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0xa814) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000280)={0x23, 0x48, 0x20, 0x7f}, 0x10) (async) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000280)={0x23, 0x48, 0x20, 0x7f}, 0x10) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000140)=0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x54000, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x54000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x1) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:38 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000040)=0x8) ioctl$PPPIOCDISCONN(r0, 0x7439) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000140)={0x7, 0x10000}) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000080)) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000000)=0x7) 20:24:38 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xb0, 0x1403, 0x0, 0x70bd2b, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}]}, 0xb0}}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:38 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') getpid() r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/pid\x00') ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000080)) 20:24:39 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40081) fanotify_init(0x40, 0x800) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1000000001140000000000dd00000000"], 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1407, 0x800, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40081) (async) fanotify_init(0x40, 0x800) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1000000001140000000000dd00000000"], 0x10}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1407, 0x800, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x0) (async) 20:24:39 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1402, 0x308, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) 20:24:39 executing program 5: r0 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x7808, 0x10, 0x3, 0x4, {{0x5, 0x4, 0x2, 0x12, 0x14, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @loopback}}}}) 20:24:39 executing program 4: sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0xa814) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000280)={0x23, 0x48, 0x20, 0x7f}, 0x10) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000140)=0x4) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x54000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x1) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:39 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') getpid() r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/pid\x00') (async) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000080)) 20:24:39 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1402, 0x308, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) 20:24:39 executing program 5: r0 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x7808, 0x10, 0x3, 0x4, {{0x5, 0x4, 0x2, 0x12, 0x14, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @loopback}}}}) 20:24:39 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40081) (async) fanotify_init(0x40, 0x800) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1000000001140000000000dd00000000"], 0x10}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1407, 0x800, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x0) 20:24:39 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000080)=0x1f9) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000040)={0xfffffff8, 0x39555659, 0x516d, 0x4000000, 0x2, @discrete={0x1, 0x7fffffff}}) 20:24:39 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 64) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000040)=0x8) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) (async, rerun: 32) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0, 0x0) (async, rerun: 32) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) (async) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000140)={0x7, 0x10000}) (async, rerun: 64) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000080)) (async, rerun: 64) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000000)=0x7) 20:24:39 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) getpid() r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/pid\x00') ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000080)) 20:24:39 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1402, 0x308, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) 20:24:39 executing program 5: r0 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x7808, 0x10, 0x3, 0x4, {{0x5, 0x4, 0x2, 0x12, 0x14, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @loopback}}}}) 20:24:39 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x140c, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000fcdbdf25000000000800040000000005a162e301080002000000000c080002000100000008000700", @ANYRES64=r0, @ANYBLOB="08000500ffffffff"], 0x3c}, 0x1, 0x0, 0x0, 0x200008c4}, 0x40801) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x890) 20:24:39 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x140c, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000fcdbdf25000000000800040000000005a162e301080002000000000c080002000100000008000700", @ANYRES64=r0, @ANYBLOB="08000500ffffffff"], 0x3c}, 0x1, 0x0, 0x0, 0x200008c4}, 0x40801) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x890) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x140c, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000fcdbdf25000000000800040000000005a162e301080002000000000c080002000100000008000700", @ANYRES64=r0, @ANYBLOB="08000500ffffffff"], 0x3c}, 0x1, 0x0, 0x0, 0x200008c4}, 0x40801) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r0) (async) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x890) (async) 20:24:39 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000080)=0x1f9) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000040)={0xfffffff8, 0x39555659, 0x516d, 0x4000000, 0x2, @discrete={0x1, 0x7fffffff}}) 20:24:39 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x6, 0x2, 0x201e, 0x3, 0x1, 0x1, 0x1, 0x2}}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f00000000c0)=0x8000) write$vhost_msg_v2(r0, &(0x7f00000002c0)={0x2, 0x0, {&(0x7f00000001c0)=""/193, 0xc1, &(0x7f0000000100)=""/21, 0x2, 0x3}}, 0x48) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="ac1414bb000000004000000000000000ac1414aa0000f385897cf7049fa7c4a554f50000000000f0ff000000ac1e00000000000000000000000000007f00e2000000000000000000000000000059"]}) 20:24:39 executing program 1: ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000000)={0x60, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}]}}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:39 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/cgroup\x00') 20:24:39 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x6, 0x2, 0x201e, 0x3, 0x1, 0x1, 0x1, 0x2}}) (async, rerun: 64) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 64) ioctl$PPPIOCDISCONN(r0, 0x7439) (async, rerun: 32) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f00000000c0)=0x8000) (async, rerun: 32) write$vhost_msg_v2(r0, &(0x7f00000002c0)={0x2, 0x0, {&(0x7f00000001c0)=""/193, 0xc1, &(0x7f0000000100)=""/21, 0x2, 0x3}}, 0x48) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="ac1414bb000000004000000000000000ac1414aa0000f385897cf7049fa7c4a554f50000000000f0ff000000ac1e00000000000000000000000000007f00e2000000000000000000000000000059"]}) 20:24:39 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x140c, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000fcdbdf25000000000800040000000005a162e301080002000000000c080002000100000008000700", @ANYRES64=r0, @ANYBLOB="08000500ffffffff"], 0x3c}, 0x1, 0x0, 0x0, 0x200008c4}, 0x40801) (async) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x890) 20:24:39 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000040)=0x8) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) (async) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000140)={0x7, 0x10000}) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000080)) (async) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000000)=0x7) 20:24:39 executing program 1: ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000000)={0x60, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}]}}) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:39 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/cgroup\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) getpgid(0x0) (async) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/cgroup\x00') (async) 20:24:39 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async, rerun: 32) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000080)=0x1f9) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000040)={0xfffffff8, 0x39555659, 0x516d, 0x4000000, 0x2, @discrete={0x1, 0x7fffffff}}) 20:24:39 executing program 1: ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000000)={0x60, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}]}}) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:39 executing program 2: getpgrp(0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100c8400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x3, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) 20:24:39 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x6, 0x2, 0x201e, 0x3, 0x1, 0x1, 0x1, 0x2}}) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f00000000c0)=0x8000) (async) write$vhost_msg_v2(r0, &(0x7f00000002c0)={0x2, 0x0, {&(0x7f00000001c0)=""/193, 0xc1, &(0x7f0000000100)=""/21, 0x2, 0x3}}, 0x48) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="ac1414bb000000004000000000000000ac1414aa0000f385897cf7049fa7c4a554f50000000000f0ff000000ac1e00000000000000000000000000007f00e2000000000000000000000000000059"]}) 20:24:39 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async, rerun: 64) r0 = getpgid(0x0) (rerun: 64) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/cgroup\x00') 20:24:39 executing program 1: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) socket$phonet_pipe(0x23, 0x5, 0x2) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') 20:24:39 executing program 2: getpgrp(0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100c8400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x3, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) 20:24:39 executing program 0: prctl$PR_GET_FPEXC(0xb, &(0x7f0000000080)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') 20:24:39 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x601, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0xc7f7) 20:24:39 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000040)) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000000)=0xfffffff7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000340)={0x1, 0x0, 0x98, &(0x7f0000000280)={0x1000, 0x3f, 0x5}}) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e86d054c5d0000000000000034", @ANYRES16=0x0, @ANYBLOB="08002abd7000fedbdf25080000000c000f00ff070000000000000c000f001c0000000000000008000c0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40005}, 0x1) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:39 executing program 0: prctl$PR_GET_FPEXC(0xb, &(0x7f0000000080)) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') 20:24:39 executing program 1: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') 20:24:39 executing program 2: getpgrp(0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100c8400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x3, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) 20:24:39 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 20:24:39 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x5e10c0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000000443a037e7bd7000fedbdfff0800010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x480d0}, 0x84) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:39 executing program 1: getpgid(0x0) (async) r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) socket$phonet_pipe(0x23, 0x5, 0x2) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') 20:24:39 executing program 0: prctl$PR_GET_FPEXC(0xb, &(0x7f0000000080)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') prctl$PR_GET_FPEXC(0xb, &(0x7f0000000080)) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) 20:24:39 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000040)) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000000)=0xfffffff7) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000340)={0x1, 0x0, 0x98, &(0x7f0000000280)={0x1000, 0x3f, 0x5}}) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async, rerun: 32) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) (rerun: 32) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e86d054c5d0000000000000034", @ANYRES16=0x0, @ANYBLOB="08002abd7000fedbdf25080000000c000f00ff070000000000000c000f001c0000000000000008000c0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40005}, 0x1) (async, rerun: 32) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (rerun: 32) 20:24:39 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x5e10c0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000000443a037e7bd7000fedbdfff0800010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x480d0}, 0x84) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:39 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') 20:24:39 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x601, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0xc7f7) 20:24:39 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x5e10c0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000000443a037e7bd7000fedbdfff0800010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x480d0}, 0x84) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:39 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) 20:24:39 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') 20:24:39 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 20:24:39 executing program 0: pkey_alloc(0x0, 0x3) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)) r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x8000, 0x9, {r0}, {0xee01}, 0x10000, 0x8fc}) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/uts\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1, r2}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r2) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x20040880) 20:24:39 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000040)) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000000)=0xfffffff7) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040) (async) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000340)={0x1, 0x0, 0x98, &(0x7f0000000280)={0x1000, 0x3f, 0x5}}) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e86d054c5d0000000000000034", @ANYRES16=0x0, @ANYBLOB="08002abd7000fedbdf25080000000c000f00ff070000000000000c000f001c0000000000000008000c0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40005}, 0x1) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:39 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') socket$inet_udp(0x2, 0x2, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') (async) 20:24:39 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x601, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0xc7f7) 20:24:39 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 20:24:39 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="7800001000000006000000044ed4003800670000083d9078ac1e0193b00000009404000001440c6531ac1414180000000707100152df97618611202cb10c302fe6009402"]}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r0}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 20:24:40 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x41, &(0x7f0000000200)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x9}}, {@max_read={'max_read', 0x3d, 0xffffffffffffffff}}, {@blksize={'blksize', 0x3d, 0x400}}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x30, 0x62, 0x39, 0x30, 0x39, 0x37, 0x39], 0x2d, [0x35, 0x35, 0x62, 0x35], 0x2d, [0x38, 0x37, 0x37, 0x30], 0x2d, [0x7a5d32137bffa277, 0x31, 0xa8, 0x62], 0x2d, [0x32, 0x35, 0x39, 0x34, 0x31, 0x33, 0x36, 0x36]}}}, {@subj_role={'subj_role', 0x3d, '/dev/input/event#\x00'}}, {@seclabel}, {@smackfshat}, {@obj_role={'obj_role', 0x3d, '!/})'}}, {@dont_hash}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}}, 0x1, 0x0, &(0x7f0000000400)="1a6253c07c0c705a62a0e217fcbd96d222bc870969522f10bdccfb462ce4641e7930abc9f2ca73e7e7aadb1a88465a87ae5f21d4e5c92fb4daf5a9d89d62b816512faa614b45f2243f4ff9f04d0d7fc6c92997764768730cdf404f1d5384cb287f6ad2ff2e783e364c43aaba522ca7f0b732ba5af5692990c4dfde8d2a691aa991") r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000140)=""/128) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000004c0)) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000580)={0x7, 0x3ff, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x9, 0xd21}) syz_mount_image$fuse(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x2808000, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}], [{@obj_user={'obj_user', 0x3d, '!-'}}, {@seclabel}, {@uid_eq={'uid', 0x3d, r1}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@smackfshat={'smackfshat', 0x3d, 'fsuuid'}}, {@permit_directio}]}}, 0x1, 0x0, &(0x7f00000006c0)="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") 20:24:40 executing program 0: pkey_alloc(0x0, 0x3) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)) (async) r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x8000, 0x9, {r0}, {0xee01}, 0x10000, 0x8fc}) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/uts\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1, r2}) (async) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r2) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x20040880) 20:24:40 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000000)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCUNBRIDGECHAN(r2, 0x7434) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:40 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) (async) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 20:24:40 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="7800001000000006000000044ed4003800670000083d9078ac1e0193b00000009404000001440c6531ac1414180000000707100152df97618611202cb10c302fe6009402"]}) (async, rerun: 32) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r0}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 20:24:40 executing program 0: pkey_alloc(0x0, 0x3) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)) (async) r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x8000, 0x9, {r0}, {0xee01}, 0x10000, 0x8fc}) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/uts\x00') (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1, r2}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r2) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x20040880) 20:24:40 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x41, &(0x7f0000000200)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x9}}, {@max_read={'max_read', 0x3d, 0xffffffffffffffff}}, {@blksize={'blksize', 0x3d, 0x400}}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x30, 0x62, 0x39, 0x30, 0x39, 0x37, 0x39], 0x2d, [0x35, 0x35, 0x62, 0x35], 0x2d, [0x38, 0x37, 0x37, 0x30], 0x2d, [0x7a5d32137bffa277, 0x31, 0xa8, 0x62], 0x2d, [0x32, 0x35, 0x39, 0x34, 0x31, 0x33, 0x36, 0x36]}}}, {@subj_role={'subj_role', 0x3d, '/dev/input/event#\x00'}}, {@seclabel}, {@smackfshat}, {@obj_role={'obj_role', 0x3d, '!/})'}}, {@dont_hash}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}}, 0x1, 0x0, &(0x7f0000000400)="1a6253c07c0c705a62a0e217fcbd96d222bc870969522f10bdccfb462ce4641e7930abc9f2ca73e7e7aadb1a88465a87ae5f21d4e5c92fb4daf5a9d89d62b816512faa614b45f2243f4ff9f04d0d7fc6c92997764768730cdf404f1d5384cb287f6ad2ff2e783e364c43aaba522ca7f0b732ba5af5692990c4dfde8d2a691aa991") r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000140)=""/128) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000004c0)) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000580)={0x7, 0x3ff, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x9, 0xd21}) syz_mount_image$fuse(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x2808000, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}], [{@obj_user={'obj_user', 0x3d, '!-'}}, {@seclabel}, {@uid_eq={'uid', 0x3d, r1}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@smackfshat={'smackfshat', 0x3d, 'fsuuid'}}, {@permit_directio}]}}, 0x1, 0x0, &(0x7f00000006c0)="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") syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x41, &(0x7f0000000200)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x9}}, {@max_read={'max_read', 0x3d, 0xffffffffffffffff}}, {@blksize={'blksize', 0x3d, 0x400}}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x30, 0x62, 0x39, 0x30, 0x39, 0x37, 0x39], 0x2d, [0x35, 0x35, 0x62, 0x35], 0x2d, [0x38, 0x37, 0x37, 0x30], 0x2d, [0x7a5d32137bffa277, 0x31, 0xa8, 0x62], 0x2d, [0x32, 0x35, 0x39, 0x34, 0x31, 0x33, 0x36, 0x36]}}}, {@subj_role={'subj_role', 0x3d, '/dev/input/event#\x00'}}, {@seclabel}, {@smackfshat}, {@obj_role={'obj_role', 0x3d, '!/})'}}, {@dont_hash}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}}, 0x1, 0x0, &(0x7f0000000400)="1a6253c07c0c705a62a0e217fcbd96d222bc870969522f10bdccfb462ce4641e7930abc9f2ca73e7e7aadb1a88465a87ae5f21d4e5c92fb4daf5a9d89d62b816512faa614b45f2243f4ff9f04d0d7fc6c92997764768730cdf404f1d5384cb287f6ad2ff2e783e364c43aaba522ca7f0b732ba5af5692990c4dfde8d2a691aa991") (async) syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101) (async) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000140)=""/128) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000004c0)) (async) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000580)={0x7, 0x3ff, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x9, 0xd21}) (async) syz_mount_image$fuse(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x2808000, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}], [{@obj_user={'obj_user', 0x3d, '!-'}}, {@seclabel}, {@uid_eq={'uid', 0x3d, r1}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@smackfshat={'smackfshat', 0x3d, 'fsuuid'}}, {@permit_directio}]}}, 0x1, 0x0, &(0x7f00000006c0)="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") (async) 20:24:40 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) (async) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) (async) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) 20:24:40 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="7800001000000006000000044ed4003800670000083d9078ac1e0193b00000009404000001440c6531ac1414180000000707100152df97618611202cb10c302fe6009402"]}) (async) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r0}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) (async, rerun: 32) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (rerun: 32) 20:24:40 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000000)) 20:24:40 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) fanotify_init(0x14, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/ipc\x00') sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x1402, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000200)={0x7, 0x1, 0x147, 0x578}) 20:24:40 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) write$nbd(r0, 0x0, 0x0) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r3, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8004) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/time_for_children\x00') r4 = getpgid(0x0) sched_rr_get_interval(r4, &(0x7f0000000ac0)) getpgid(r4) 20:24:40 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x41, &(0x7f0000000200)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x9}}, {@max_read={'max_read', 0x3d, 0xffffffffffffffff}}, {@blksize={'blksize', 0x3d, 0x400}}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x30, 0x62, 0x39, 0x30, 0x39, 0x37, 0x39], 0x2d, [0x35, 0x35, 0x62, 0x35], 0x2d, [0x38, 0x37, 0x37, 0x30], 0x2d, [0x7a5d32137bffa277, 0x31, 0xa8, 0x62], 0x2d, [0x32, 0x35, 0x39, 0x34, 0x31, 0x33, 0x36, 0x36]}}}, {@subj_role={'subj_role', 0x3d, '/dev/input/event#\x00'}}, {@seclabel}, {@smackfshat}, {@obj_role={'obj_role', 0x3d, '!/})'}}, {@dont_hash}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}}, 0x1, 0x0, &(0x7f0000000400)="1a6253c07c0c705a62a0e217fcbd96d222bc870969522f10bdccfb462ce4641e7930abc9f2ca73e7e7aadb1a88465a87ae5f21d4e5c92fb4daf5a9d89d62b816512faa614b45f2243f4ff9f04d0d7fc6c92997764768730cdf404f1d5384cb287f6ad2ff2e783e364c43aaba522ca7f0b732ba5af5692990c4dfde8d2a691aa991") r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000140)=""/128) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000004c0)) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) (async, rerun: 64) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000580)={0x7, 0x3ff, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x9, 0xd21}) (rerun: 64) syz_mount_image$fuse(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x2808000, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}], [{@obj_user={'obj_user', 0x3d, '!-'}}, {@seclabel}, {@uid_eq={'uid', 0x3d, r1}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@smackfshat={'smackfshat', 0x3d, 'fsuuid'}}, {@permit_directio}]}}, 0x1, 0x0, &(0x7f00000006c0)="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") 20:24:40 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000000)=0x3) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCUNBRIDGECHAN(r2, 0x7434) (async, rerun: 64) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (rerun: 64) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:40 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) write$nbd(r0, 0x0, 0x0) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r3, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8004) (async) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/time_for_children\x00') (async) r4 = getpgid(0x0) sched_rr_get_interval(r4, &(0x7f0000000ac0)) getpgid(r4) 20:24:40 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) fanotify_init(0x14, 0x2) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/ipc\x00') (async) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x1402, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000200)={0x7, 0x1, 0x147, 0x578}) 20:24:40 executing program 1: syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) 20:24:40 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) write$nbd(r0, 0x0, 0x0) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r3, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8004) (async) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/time_for_children\x00') (async, rerun: 64) r4 = getpgid(0x0) (rerun: 64) sched_rr_get_interval(r4, &(0x7f0000000ac0)) (async) getpgid(r4) 20:24:40 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x101400) syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x10000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:40 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) fanotify_init(0x14, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/ipc\x00') sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x1402, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x800) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000200)={0x7, 0x1, 0x147, 0x578}) 20:24:40 executing program 1: syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) 20:24:40 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000000)) 20:24:40 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000000)=0x3) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCUNBRIDGECHAN(r2, 0x7434) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:40 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x101400) (async) syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x10000) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:40 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000000)={0x78c2}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000040)=""/46, 0x2e, &(0x7f00000001c0)=""/170, 0x1, 0x3}}, 0x48) 20:24:40 executing program 1: syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) 20:24:40 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="010029bd7000fbdbdf250100000014001f00fc010000000000000000000000000000050007000300000006001d0001000000080018000a01010008000b00000000000500130005000000"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x1) 20:24:40 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x101400) (async) syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x10000) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x129, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/pid_for_children\x00') syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/ipc\x00') 20:24:40 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000000)={0x78c2}) (async) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000000)={0x78c2}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000040)=""/46, 0x2e, &(0x7f00000001c0)=""/170, 0x1, 0x3}}, 0x48) 20:24:40 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="010029bd7000fbdbdf250100000014001f00fc010000000000000000000000000000050007000300000006001d0001000000080018000a01010008000b00000000000500130005000000"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x1) 20:24:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x129, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) (async) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/pid_for_children\x00') (async) syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/ipc\x00') 20:24:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032dbd7000fbdbdf25000000000500070002000000090018007f00000106001c00000000000c000f00060000000000000008000a0002000000"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x40014) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fbdbdf25040000000eb7994525a83c0e3e6e773e6d04e53a9dbff6d5c60ad7a80f7bd51a01046427cbfa7479b07e20885281f785fd6166fc3d02f50d88189717c5ab8b68098830caf81591d54647ca2c8b0e673daadc83e8794aa71f159f58351a335ec05649087a4195a0a72964d066d6ddc24112ea75a12b1b20968ff043b504aeb85d901625ca2f79f2e81f64cb04a764ca4f5a4e5fadfe7889f21046e79cba3e65193460bc0821d0"], 0x14}, 0x1, 0x0, 0x0, 0x20008854}, 0x4000005) 20:24:40 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000000)) (async) 20:24:40 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) (async) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000000)={0x78c2}) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000040)=""/46, 0x2e, &(0x7f00000001c0)=""/170, 0x1, 0x3}}, 0x48) 20:24:40 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x4) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:40 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="50000000c859d8d0dd0a8740b3e9481a175a7b5a479eec25b7296ce1e2c552c5b903ae07a16e084d2f6944d1006085deabb2f388b0f8ca5dc6c3f4d59fb54b7c8ec793c698767d4205017fceccbc1f20c5fec320f60455a670c3cec4a3014c5e63e34c5222154f961ab0562d282de792abf67c2373673a48a40ab513d2fa34010c8db71717ed5883b7bc65ba36aa9d1bc9d46379f7f12ce69504e7e91eb136cdcbac1191392949bfb7c32f8b69009613d98456abd4e35aae7f55cacc236aefddf26e0b52c61c4fb7caf50c6c2b8b8b5e5ac8ac73d357c270f32b7427faef5c417a734166a60f81ea22745794d0e471db55fa9a6a23c54e9b25f182305859c9a0bd24f4e24f566b1832da923616e1053835e689becc752c88cc6065571fdf39f06e0b0a6d1d03ad06f0fd2fad26a176834fa757e7b5fa609ebe9bf5e8b572fb7bdf2cb2bcb99562b9f961a192e91ab1bab0b23055eb0728919fb278a123eabc6d0bdca45f3bf74391d90142977badafdf0ba68fac3ba0a52c33d9b59d4def6195a8dde956bb20ebdae53991850eeb42ac31e6fafa579d8c86ba362e1c7e58505a8920627eb3ce4e7c990d8d1f2c7c8f6a", @ANYRES16=0x0, @ANYBLOB="010029bd7000fbdbdf250100000014001f00fc010000000000000000000000000000050007000300000006001d0001000000080018000a01010008000b00000000000500130005000000"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x1) 20:24:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032dbd7000fbdbdf25000000000500070002000000090018007f00000106001c00000000000c000f00060000000000000008000a0002000000"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x40014) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fbdbdf25040000000eb7994525a83c0e3e6e773e6d04e53a9dbff6d5c60ad7a80f7bd51a01046427cbfa7479b07e20885281f785fd6166fc3d02f50d88189717c5ab8b68098830caf81591d54647ca2c8b0e673daadc83e8794aa71f159f58351a335ec05649087a4195a0a72964d066d6ddc24112ea75a12b1b20968ff043b504aeb85d901625ca2f79f2e81f64cb04a764ca4f5a4e5fadfe7889f21046e79cba3e65193460bc0821d0"], 0x14}, 0x1, 0x0, 0x0, 0x20008854}, 0x4000005) 20:24:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x129, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/pid_for_children\x00') (async) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/pid_for_children\x00') syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/ipc\x00') 20:24:40 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0xffff1586, 0x0, 0x24, 0x100, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x700, 0x7, 0x3eb, 0x76, {{0x19, 0x4, 0x0, 0x23, 0x64, 0x65, 0x0, 0x1, 0x4, 0x0, @loopback, @multicast2, {[@rr={0x7, 0x13, 0xbb, [@broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x39}, @local]}, @timestamp_addr={0x44, 0x3c, 0x3a, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffd}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@remote, 0x44}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x20}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x6}, {@empty, 0x3}]}]}}}}}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0a10200f8ffffff18130000642689093932b423fb0b704ec018d735408cc24f7da1e566548aa6bc90af8b793b027a3cb92fb2dfbb1390193aca4956d86cf010a35e17dc98bb5d0476928cd228a97013e09a", @ANYRES32=r0, @ANYBLOB="00000000000000008510000003000000c48a5000ffffffff852000000500000018180000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x1, 0x2c, &(0x7f0000000140)=""/44, 0x41000, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x4, 0x4, 0xfffffe01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, r2]}, 0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032dbd7000fbdbdf25000000000500070002000000090018007f00000106001c00000000000c000f00060000000000000008000a0002000000"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x40014) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fbdbdf25040000000eb7994525a83c0e3e6e773e6d04e53a9dbff6d5c60ad7a80f7bd51a01046427cbfa7479b07e20885281f785fd6166fc3d02f50d88189717c5ab8b68098830caf81591d54647ca2c8b0e673daadc83e8794aa71f159f58351a335ec05649087a4195a0a72964d066d6ddc24112ea75a12b1b20968ff043b504aeb85d901625ca2f79f2e81f64cb04a764ca4f5a4e5fadfe7889f21046e79cba3e65193460bc0821d0"], 0x14}, 0x1, 0x0, 0x0, 0x20008854}, 0x4000005) 20:24:40 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000140)=0x36a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x5) 20:24:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0xffff1586, 0x0, 0x24, 0x100, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0xffff1586, 0x0, 0x24, 0x100, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x700, 0x7, 0x3eb, 0x76, {{0x19, 0x4, 0x0, 0x23, 0x64, 0x65, 0x0, 0x1, 0x4, 0x0, @loopback, @multicast2, {[@rr={0x7, 0x13, 0xbb, [@broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x39}, @local]}, @timestamp_addr={0x44, 0x3c, 0x3a, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffd}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@remote, 0x44}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x20}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x6}, {@empty, 0x3}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x700, 0x7, 0x3eb, 0x76, {{0x19, 0x4, 0x0, 0x23, 0x64, 0x65, 0x0, 0x1, 0x4, 0x0, @loopback, @multicast2, {[@rr={0x7, 0x13, 0xbb, [@broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x39}, @local]}, @timestamp_addr={0x44, 0x3c, 0x3a, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffd}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@remote, 0x44}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x20}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x6}, {@empty, 0x3}]}]}}}}}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0a10200f8ffffff18130000642689093932b423fb0b704ec018d735408cc24f7da1e566548aa6bc90af8b793b027a3cb92fb2dfbb1390193aca4956d86cf010a35e17dc98bb5d0476928cd228a97013e09a", @ANYRES32=r0, @ANYBLOB="00000000000000008510000003000000c48a5000ffffffff852000000500000018180000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x1, 0x2c, &(0x7f0000000140)=""/44, 0x41000, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x4, 0x4, 0xfffffe01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, r2]}, 0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:40 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000140)=0x36a) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x5) 20:24:40 executing program 0: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/pid_for_children\x00') 20:24:41 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x4041, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:41 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 20:24:41 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x4) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:41 executing program 0: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/pid_for_children\x00') 20:24:41 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0xffff1586, 0x0, 0x24, 0x100, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x48) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x700, 0x7, 0x3eb, 0x76, {{0x19, 0x4, 0x0, 0x23, 0x64, 0x65, 0x0, 0x1, 0x4, 0x0, @loopback, @multicast2, {[@rr={0x7, 0x13, 0xbb, [@broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x39}, @local]}, @timestamp_addr={0x44, 0x3c, 0x3a, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffd}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@remote, 0x44}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x20}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x6}, {@empty, 0x3}]}]}}}}}) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0a10200f8ffffff18130000642689093932b423fb0b704ec018d735408cc24f7da1e566548aa6bc90af8b793b027a3cb92fb2dfbb1390193aca4956d86cf010a35e17dc98bb5d0476928cd228a97013e09a", @ANYRES32=r0, @ANYBLOB="00000000000000008510000003000000c48a5000ffffffff852000000500000018180000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x1, 0x2c, &(0x7f0000000140)=""/44, 0x41000, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x4, 0x4, 0xfffffe01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, r2]}, 0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:41 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000140)=0x36a) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x5) 20:24:41 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x4041, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:41 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x420000, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x140c, 0x10, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000082}, 0x4000041) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000040)=0x7) 20:24:41 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x70bd25}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000200)={0x3, 0x39555659, 0x5, 0x3, 0x3, @stepwise={{0x3}, {0x3, 0xbbb}, {0x3ff, 0x2}}}) ioctl$PPPIOCDISCONN(r2, 0x7439) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000001", @ANYRES16=0x0, @ANYBLOB="20002dbd7000fedbdf250200000008000700", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="060006000000000008000700", @ANYRES32=r0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r2, @ANYBLOB="0800080003000000"], 0x4c}}, 0x4000000) 20:24:41 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) 20:24:41 executing program 0: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async, rerun: 32) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/pid_for_children\x00') (rerun: 32) 20:24:41 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x4041, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x4041, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) 20:24:41 executing program 0: ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000040)={0x5, 0x1, 0x8000, 0x2}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') 20:24:41 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x420000, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x140c, 0x10, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000082}, 0x4000041) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000040)=0x7) 20:24:41 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 32) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x4) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async, rerun: 64) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (rerun: 64) 20:24:41 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x70bd25}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000200)={0x3, 0x39555659, 0x5, 0x3, 0x3, @stepwise={{0x3}, {0x3, 0xbbb}, {0x3ff, 0x2}}}) ioctl$PPPIOCDISCONN(r2, 0x7439) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000001", @ANYRES16=0x0, @ANYBLOB="20002dbd7000fedbdf250200000008000700", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="060006000000000008000700", @ANYRES32=r0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r2, @ANYBLOB="0800080003000000"], 0x4c}}, 0x4000000) 20:24:41 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 20:24:41 executing program 0: ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000040)={0x5, 0x1, 0x8000, 0x2}) (async) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000040)={0x5, 0x1, 0x8000, 0x2}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') 20:24:41 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x105280, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x810) 20:24:41 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x420000, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x140c, 0x10, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000082}, 0x4000041) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000040)=0x7) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000040)=0x7) 20:24:41 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) 20:24:41 executing program 0: ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000040)={0x5, 0x1, 0x8000, 0x2}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000040)={0x5, 0x1, 0x8000, 0x2}) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') (async) 20:24:41 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x70bd25}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000200)={0x3, 0x39555659, 0x5, 0x3, 0x3, @stepwise={{0x3}, {0x3, 0xbbb}, {0x3ff, 0x2}}}) (async) ioctl$PPPIOCDISCONN(r2, 0x7439) (async) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000001", @ANYRES16=0x0, @ANYBLOB="20002dbd7000fedbdf250200000008000700", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="060006000000000008000700", @ANYRES32=r0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r2, @ANYBLOB="0800080003000000"], 0x4c}}, 0x4000000) 20:24:41 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x444008) 20:24:41 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x105280, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x105280, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x810) 20:24:41 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={@local, 0x0, 0x0, 0x30, 0x0, [{@empty}, {@loopback}, {@empty}]}}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001214000427bd7000fddbdf2508004f000400000008004f0002000000080001000000000008004f000200000008004f00000000000800150001009f70bec46c88ca66b1802c0803000008004f00030000000800150000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4006004}, 0x1) 20:24:41 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) (async) 20:24:41 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4) 20:24:41 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={@local, 0x0, 0x0, 0x30, 0x0, [{@empty}, {@loopback}, {@empty}]}}) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001214000427bd7000fddbdf2508004f000400000008004f0002000000080001000000000008004f000200000008004f00000000000800150001009f70bec46c88ca66b1802c0803000008004f00030000000800150000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4006004}, 0x1) 20:24:41 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) (async) 20:24:41 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x105280, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x810) 20:24:41 executing program 1: sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080027bd7000ffdbdf250300000005001400ff00000014001f00ff01000000000000000000000000000105001200e000000005000400400000000800180000000000"], 0x48}, 0x1, 0x0, 0x0, 0xc854}, 0x20008002) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time\x00') sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) 20:24:41 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={@local, 0x0, 0x0, 0x30, 0x0, [{@empty}, {@loopback}, {@empty}]}}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001214000427bd7000fddbdf2508004f000400000008004f0002000000080001000000000008004f000200000008004f00000000000800150001009f70bec46c88ca66b1802c0803000008004f00030000000800150000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4006004}, 0x1) 20:24:41 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4) 20:24:41 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x444008) 20:24:41 executing program 5: ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x1, 0x4, {}, {0xffffffffffffffff}, 0x6, 0xab1}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000080)={0x4, 0x9}) syz_open_dev$dri(&(0x7f0000000040), 0x7fffffff, 0x800) 20:24:41 executing program 1: sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080027bd7000ffdbdf250300000005001400ff00000014001f00ff01000000000000000000000000000105001200e000000005000400400000000800180000000000"], 0x48}, 0x1, 0x0, 0x0, 0xc854}, 0x20008002) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time\x00') sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) 20:24:41 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000040)={0x2, 0xf6}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:41 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0x5) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000040)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:41 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4) 20:24:41 executing program 5: ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x1, 0x4, {}, {0xffffffffffffffff}, 0x6, 0xab1}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000080)={0x4, 0x9}) syz_open_dev$dri(&(0x7f0000000040), 0x7fffffff, 0x800) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x1, 0x4, {}, {0xffffffffffffffff}, 0x6, 0xab1}) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000080)={0x4, 0x9}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x7fffffff, 0x800) (async) 20:24:41 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000040)={0x2, 0xf6}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:41 executing program 0: socket$l2tp(0x2, 0x2, 0x73) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@multicast1, 0x1, 0x0, 0x10, 0x0, [{@remote}]}}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000040)=0x7fffffff) 20:24:41 executing program 1: sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080027bd7000ffdbdf250300000005001400ff00000014001f00ff01000000000000000000000000000105001200e000000005000400400000000800180000000000"], 0x48}, 0x1, 0x0, 0x0, 0xc854}, 0x20008002) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time\x00') sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) 20:24:42 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x444008) 20:24:42 executing program 5: ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x1, 0x4, {}, {0xffffffffffffffff}, 0x6, 0xab1}) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async, rerun: 32) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000080)={0x4, 0x9}) (rerun: 32) syz_open_dev$dri(&(0x7f0000000040), 0x7fffffff, 0x800) 20:24:42 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0x5) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000040)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)) (async) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0x5) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000040)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) 20:24:42 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000040)={0x2, 0xf6}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:42 executing program 1: ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000040)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, 0x930, 0x5, 0x30, 0xffffffffffffffff, 0x0) 20:24:42 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1f, 0x8, 0x8001, 0x1010, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x48) 20:24:42 executing program 0: socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) (async, rerun: 64) r0 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@multicast1, 0x1, 0x0, 0x10, 0x0, [{@remote}]}}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000040)=0x7fffffff) 20:24:42 executing program 2: r0 = getpid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x7, 0x9, {r0}, {0xffffffffffffffff}, 0x2b, 0xbc1a}) r1 = getpgrp(r0) syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/pid\x00') 20:24:42 executing program 1: ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000040)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') (async) mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, 0x930, 0x5, 0x30, 0xffffffffffffffff, 0x0) 20:24:42 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1f, 0x8, 0x8001, 0x1010, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x48) 20:24:42 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)=0x3c) 20:24:42 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0x5) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000040)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)) (async) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0x5) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000040)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) 20:24:42 executing program 2: r0 = getpid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x7, 0x9, {r0}, {0xffffffffffffffff}, 0x2b, 0xbc1a}) r1 = getpgrp(r0) syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/pid\x00') getpid() (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x7, 0x9, {r0}, {0xffffffffffffffff}, 0x2b, 0xbc1a}) (async) getpgrp(r0) (async) syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/pid\x00') (async) 20:24:42 executing program 1: ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000040)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, 0x930, 0x5, 0x30, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, 0x930, 0x5, 0x30, 0xffffffffffffffff, 0x0) 20:24:42 executing program 0: socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@multicast1, 0x1, 0x0, 0x10, 0x0, [{@remote}]}}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000040)=0x7fffffff) 20:24:42 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1f, 0x8, 0x8001, 0x1010, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x48) 20:24:42 executing program 2: r0 = getpid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x7, 0x9, {r0}, {0xffffffffffffffff}, 0x2b, 0xbc1a}) r1 = getpgrp(r0) syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/pid\x00') (async) syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/pid\x00') 20:24:42 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)=0x3c) 20:24:42 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') 20:24:42 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x2000) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3ff}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x1407, 0x100, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0xc000) ioctl$PPPIOCDISCONN(r2, 0x7439) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x10000, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000000)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1402, 0x400, 0x8, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x200488d5) 20:24:42 executing program 0: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={@private0, @private=0xa010100, 0xd, 0x12}}) r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_open_procfs$namespace(r1, &(0x7f0000000240)='ns/user\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x24000010}, 0xf, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES8=r2, @ANYRES16=0x0, @ANYBLOB="00042dbd7000fed4df250000000008040500ffffff8e0d29aae9cb0800080001000000080002010002000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=r0], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = getpgrp(r0) sched_rr_get_interval(r3, &(0x7f0000000200)) 20:24:42 executing program 5: getpgrp(0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(r0, r0) 20:24:42 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') 20:24:42 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)=0x3c) 20:24:42 executing program 5: getpgrp(0xffffffffffffffff) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(r0, r0) 20:24:42 executing program 0: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={@private0, @private=0xa010100, 0xd, 0x12}}) r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_open_procfs$namespace(r1, &(0x7f0000000240)='ns/user\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x24000010}, 0xf, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES8=r2, @ANYRES16=0x0, @ANYBLOB="00042dbd7000fed4df250000000008040500ffffff8e0d29aae9cb0800080001000000080002010002000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=r0], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = getpgrp(r0) sched_rr_get_interval(r3, &(0x7f0000000200)) 20:24:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async, rerun: 32) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3ff}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) (async, rerun: 32) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async, rerun: 64) r3 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x1407, 0x100, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0xc000) (async) ioctl$PPPIOCDISCONN(r2, 0x7439) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x10000, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000000)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1402, 0x400, 0x8, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x200488d5) 20:24:42 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x2000) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:42 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') 20:24:42 executing program 5: getpgrp(0xffffffffffffffff) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(r0, r0) 20:24:42 executing program 0: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={@private0, @private=0xa010100, 0xd, 0x12}}) r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_open_procfs$namespace(r1, &(0x7f0000000240)='ns/user\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x24000010}, 0xf, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES8=r2, @ANYRES16=0x0, @ANYBLOB="00042dbd7000fed4df250000000008040500ffffff8e0d29aae9cb0800080001000000080002010002000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=r0], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = getpgrp(r0) sched_rr_get_interval(r3, &(0x7f0000000200)) 20:24:42 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x1ff, 0x7f, 0x53, 0xfffffff7}, {0xb305, 0x7f, 0xce}, {0xfdd5, 0x5, 0xff, 0x7}]}) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:42 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="100000000114002ba2b59b8ed565a158ab863bada47625022e56e73a72e0dd369e33ce2eac5f99c682c3d6b5574f394358206d54bd0e7024ab783b5c1357516e5a00e8c4f80cb26ddf1eb4f290675609555e15580143a24b58fce4ee4d8e63bca10c6e2f82ae9e57c3be4fe2ace4d23cb0fef1b4ba08c00406f140d5f148a3bb5135f288e1515093c3a534db6193196b4776e1680900000000000000fbfc85561c988dce2ec9707da71ceaf8ca849a2939a39d5f25a014feb4d3b69334fce91d254a8f83e0263ddd94d058e147ea9b010fec3780e0580d"], 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1407, 0x8, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 20:24:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3ff}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x1407, 0x100, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0xc000) ioctl$PPPIOCDISCONN(r2, 0x7439) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x10000, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000000)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1402, 0x400, 0x8, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x200488d5) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3ff}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x1407, 0x100, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0xc000) (async) ioctl$PPPIOCDISCONN(r2, 0x7439) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x10000, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000000)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1402, 0x400, 0x8, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x200488d5) (async) 20:24:42 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x2000) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x2000) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) 20:24:42 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400400, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x1402, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x64000000}, 0x20000000) 20:24:42 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) ioctl$VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000200)={0x40, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}]}}) openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x90}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40080) 20:24:42 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x1ff, 0x7f, 0x53, 0xfffffff7}, {0xb305, 0x7f, 0xce}, {0xfdd5, 0x5, 0xff, 0x7}]}) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:42 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="100000000114002ba2b59b8ed565a158ab863bada47625022e56e73a72e0dd369e33ce2eac5f99c682c3d6b5574f394358206d54bd0e7024ab783b5c1357516e5a00e8c4f80cb26ddf1eb4f290675609555e15580143a24b58fce4ee4d8e63bca10c6e2f82ae9e57c3be4fe2ace4d23cb0fef1b4ba08c00406f140d5f148a3bb5135f288e1515093c3a534db6193196b4776e1680900000000000000fbfc85561c988dce2ec9707da71ceaf8ca849a2939a39d5f25a014feb4d3b69334fce91d254a8f83e0263ddd94d058e147ea9b010fec3780e0580d"], 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1407, 0x8, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 20:24:42 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000000)=0x9, 0x4) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x420440, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x280, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x404c804) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl1\x00', r1, 0x1, 0x8000, 0x8, 0x2, {{0x13, 0x4, 0x3, 0x2a, 0x4c, 0x66, 0x0, 0x9, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0x1b, 0x3, 0x7, [{@private=0xa010102, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}, @timestamp_addr={0x44, 0x14, 0x6d, 0x1, 0x1, [{@loopback}, {@local, 0x1}]}, @lsrr={0x83, 0xf, 0x3c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @empty]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8000, 0x3, 0xffffffff, {{0x20, 0x4, 0x1, 0x7, 0x80, 0x68, 0x0, 0x1, 0x4, 0x0, @private=0xa010102, @empty, {[@timestamp_addr={0x44, 0x24, 0xe7, 0x1, 0x7, [{@private=0xa010100, 0xffffffff}, {@local, 0x66c}, {@private=0xa010102, 0x216}, {@local, 0x2}]}, @timestamp_prespec={0x44, 0xc, 0x15, 0x3, 0x2, [{@empty, 0x6}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0xe6, 0x3, 0x9, [{@loopback, 0x401}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x375}, {@multicast1, 0xb6}]}, @rr={0x7, 0x1f, 0xba, [@dev={0xac, 0x14, 0x14, 0x2b}, @broadcast, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}]}}}}}) 20:24:42 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400400, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x1402, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x64000000}, 0x20000000) 20:24:43 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x604001, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000007c0)=0xfffffffe) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:43 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x1) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) ioctl$PPPIOCDISCONN(r1, 0x7439) ioctl$VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000200)={0x40, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}]}}) (async) ioctl$VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000200)={0x40, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}]}}) openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x90}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40080) 20:24:43 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x1ff, 0x7f, 0x53, 0xfffffff7}, {0xb305, 0x7f, 0xce}, {0xfdd5, 0x5, 0xff, 0x7}]}) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x1ff, 0x7f, 0x53, 0xfffffff7}, {0xb305, 0x7f, 0xce}, {0xfdd5, 0x5, 0xff, 0x7}]}) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (async) 20:24:43 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000000)=0x9, 0x4) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x420440, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x280, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x404c804) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl1\x00', r1, 0x1, 0x8000, 0x8, 0x2, {{0x13, 0x4, 0x3, 0x2a, 0x4c, 0x66, 0x0, 0x9, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0x1b, 0x3, 0x7, [{@private=0xa010102, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}, @timestamp_addr={0x44, 0x14, 0x6d, 0x1, 0x1, [{@loopback}, {@local, 0x1}]}, @lsrr={0x83, 0xf, 0x3c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @empty]}, @end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8000, 0x3, 0xffffffff, {{0x20, 0x4, 0x1, 0x7, 0x80, 0x68, 0x0, 0x1, 0x4, 0x0, @private=0xa010102, @empty, {[@timestamp_addr={0x44, 0x24, 0xe7, 0x1, 0x7, [{@private=0xa010100, 0xffffffff}, {@local, 0x66c}, {@private=0xa010102, 0x216}, {@local, 0x2}]}, @timestamp_prespec={0x44, 0xc, 0x15, 0x3, 0x2, [{@empty, 0x6}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0xe6, 0x3, 0x9, [{@loopback, 0x401}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x375}, {@multicast1, 0xb6}]}, @rr={0x7, 0x1f, 0xba, [@dev={0xac, 0x14, 0x14, 0x2b}, @broadcast, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}]}}}}}) 20:24:43 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') socket$nl_rdma(0x10, 0x3, 0x14) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="100000000114002ba2b59b8ed565a158ab863bada47625022e56e73a72e0dd369e33ce2eac5f99c682c3d6b5574f394358206d54bd0e7024ab783b5c1357516e5a00e8c4f80cb26ddf1eb4f290675609555e15580143a24b58fce4ee4d8e63bca10c6e2f82ae9e57c3be4fe2ace4d23cb0fef1b4ba08c00406f140d5f148a3bb5135f288e1515093c3a534db6193196b4776e1680900000000000000fbfc85561c988dce2ec9707da71ceaf8ca849a2939a39d5f25a014feb4d3b69334fce91d254a8f83e0263ddd94d058e147ea9b010fec3780e0580d"], 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1407, 0x8, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1407, 0x8, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 20:24:43 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x604001, 0x0) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000007c0)=0xfffffffe) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:43 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400400, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400400, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x1402, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x64000000}, 0x20000000) 20:24:43 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x1) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) ioctl$VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000200)={0x40, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}]}}) (async) openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x90}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40080) 20:24:43 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1407, 0x10, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) 20:24:43 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000000)=0x9, 0x4) (async) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000000)=0x9, 0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x420440, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x420440, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x280, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x404c804) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl1\x00', r1, 0x1, 0x8000, 0x8, 0x2, {{0x13, 0x4, 0x3, 0x2a, 0x4c, 0x66, 0x0, 0x9, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0x1b, 0x3, 0x7, [{@private=0xa010102, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}, @timestamp_addr={0x44, 0x14, 0x6d, 0x1, 0x1, [{@loopback}, {@local, 0x1}]}, @lsrr={0x83, 0xf, 0x3c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @empty]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8000, 0x3, 0xffffffff, {{0x20, 0x4, 0x1, 0x7, 0x80, 0x68, 0x0, 0x1, 0x4, 0x0, @private=0xa010102, @empty, {[@timestamp_addr={0x44, 0x24, 0xe7, 0x1, 0x7, [{@private=0xa010100, 0xffffffff}, {@local, 0x66c}, {@private=0xa010102, 0x216}, {@local, 0x2}]}, @timestamp_prespec={0x44, 0xc, 0x15, 0x3, 0x2, [{@empty, 0x6}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0xe6, 0x3, 0x9, [{@loopback, 0x401}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x375}, {@multicast1, 0xb6}]}, @rr={0x7, 0x1f, 0xba, [@dev={0xac, 0x14, 0x14, 0x2b}, @broadcast, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}]}}}}}) 20:24:43 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x604001, 0x0) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000007c0)=0xfffffffe) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:43 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000100000800010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x0, 0x0, 0x1}) 20:24:43 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = getpgid(0x0) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) sched_rr_get_interval(r0, &(0x7f0000000080)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x4) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f00000001c0)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "1cfd8fc61f682352"}, 0x10}, 0x1, 0x0, 0x0, 0x880}, 0x8080) r3 = getpgid(r0) sched_rr_get_interval(r3, &(0x7f0000000ac0)) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/uts\x00') 20:24:43 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@multicast1, 0x1, 0x0, 0x50, 0x0, [{@multicast2}, {@dev}, {@multicast1}, {@multicast1}, {@multicast2}]}}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x200081, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') 20:24:43 executing program 2: ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)=0x204000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/69) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x1, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "02f8b8281f3dcb78"}, 0x3e}, 0x1, 0x0, 0x0, 0x44845}, 0x4008001) 20:24:43 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1407, 0x10, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) (rerun: 32) 20:24:43 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x620001, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:43 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = getpgid(0x0) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) sched_rr_get_interval(r0, &(0x7f0000000080)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x4) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f00000001c0)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "1cfd8fc61f682352"}, 0x10}, 0x1, 0x0, 0x0, 0x880}, 0x8080) r3 = getpgid(r0) sched_rr_get_interval(r3, &(0x7f0000000ac0)) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/uts\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) getpgid(0x0) (async) getpgid(0x0) (async) sched_rr_get_interval(r1, &(0x7f0000000ac0)) (async) sched_rr_get_interval(r0, &(0x7f0000000080)) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f00000001c0)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "1cfd8fc61f682352"}, 0x10}, 0x1, 0x0, 0x0, 0x880}, 0x8080) (async) getpgid(r0) (async) sched_rr_get_interval(r3, &(0x7f0000000ac0)) (async) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/uts\x00') (async) 20:24:43 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x620001, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:43 executing program 2: ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)=0x204000) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/69) (async) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x1, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "02f8b8281f3dcb78"}, 0x3e}, 0x1, 0x0, 0x0, 0x44845}, 0x4008001) 20:24:43 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@multicast1, 0x1, 0x0, 0x50, 0x0, [{@multicast2}, {@dev}, {@multicast1}, {@multicast1}, {@multicast2}]}}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x200081, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') 20:24:43 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1407, 0x10, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1407, 0x10, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) 20:24:43 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000100000800010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x0, 0x0, 0x1}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000100000800010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x0, 0x0, 0x1}) (async) 20:24:43 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r0 = getpgid(0x0) (async) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) sched_rr_get_interval(r0, &(0x7f0000000080)) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x4) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f00000001c0)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "1cfd8fc61f682352"}, 0x10}, 0x1, 0x0, 0x0, 0x880}, 0x8080) (async) r3 = getpgid(r0) sched_rr_get_interval(r3, &(0x7f0000000ac0)) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/uts\x00') 20:24:43 executing program 2: ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)=0x204000) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/69) (async) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x1, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "02f8b8281f3dcb78"}, 0x3e}, 0x1, 0x0, 0x0, 0x44845}, 0x4008001) 20:24:43 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x620001, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:43 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@multicast1, 0x1, 0x0, 0x50, 0x0, [{@multicast2}, {@dev}, {@multicast1}, {@multicast1}, {@multicast2}]}}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x200081, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') 20:24:43 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x0, r0}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:43 executing program 2: ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/time_for_children\x00') ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0]}) 20:24:43 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:43 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000100000800010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x0, 0x0, 0x1}) 20:24:43 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1c, 0x1, 0xfffffffe, 0xfffffffd, 0x1481, 0x1, 0xab22, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x48) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r4, 0x7439) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000380)=@raw=[@exit, @jmp={0x5, 0x1, 0xc, 0x4, 0x8, 0xffffffffffffffe0, 0x4}], &(0x7f00000003c0)='GPL\x00', 0x8, 0xa7, &(0x7f0000000400)=""/167, 0x40f00, 0x4, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000004c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0xb, 0x100, 0x7ff}, 0x10, 0x145f8, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[r4, r0, r0]}, 0x80) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000300), 0x42000, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000340)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:43 executing program 2: ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/time_for_children\x00') (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0]}) 20:24:43 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x0, r0}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) (async) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x0, r0}) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) 20:24:43 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000200), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x1402, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x1) 20:24:43 executing program 2: ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/time_for_children\x00') ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/time_for_children\x00') (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0]}) (async) 20:24:43 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1c, 0x1, 0xfffffffe, 0xfffffffd, 0x1481, 0x1, 0xab22, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x48) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r4, 0x7439) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000380)=@raw=[@exit, @jmp={0x5, 0x1, 0xc, 0x4, 0x8, 0xffffffffffffffe0, 0x4}], &(0x7f00000003c0)='GPL\x00', 0x8, 0xa7, &(0x7f0000000400)=""/167, 0x40f00, 0x4, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000004c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0xb, 0x100, 0x7ff}, 0x10, 0x145f8, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[r4, r0, r0]}, 0x80) (async) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000300), 0x42000, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000340)) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x0, 0x3, 0x22ef}, @L2TP_ATTR_PROTO_VERSION={0x0, 0x7, 0x3}, @L2TP_ATTR_IP6_SADDR={0x0, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_PROTO_VERSION={0x0, 0x7, 0x2}, @L2TP_ATTR_RECV_SEQ={0x0, 0x12, 0x7}, @L2TP_ATTR_UDP_DPORT={0x0, 0x1b, 0x4e20}, @L2TP_ATTR_VLAN_ID={0x0, 0xe, 0x7}, @L2TP_ATTR_OFFSET, @L2TP_ATTR_DATA_SEQ={0x0, 0x4, 0x7f}]}, 0xffeb}, 0x1, 0x0, 0x0, 0x44814}, 0x40488c1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)) r3 = getpgid(0x0) sched_rr_get_interval(r3, &(0x7f0000000ac0)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0xdf, 0x8, {r3}, {}, 0x0, 0xc}) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)=0x3) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000100)) 20:24:43 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000200), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x1402, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x1) 20:24:43 executing program 2: r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r0, 0x20, &(0x7f00000001c0)={&(0x7f0000000040)=""/170, 0xaa, 0x0, &(0x7f0000000140)=""/128, 0x80}}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:43 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) (async) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:43 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x0, r0}) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:44 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1c, 0x1, 0xfffffffe, 0xfffffffd, 0x1481, 0x1, 0xab22, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x48) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r4, 0x7439) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000380)=@raw=[@exit, @jmp={0x5, 0x1, 0xc, 0x4, 0x8, 0xffffffffffffffe0, 0x4}], &(0x7f00000003c0)='GPL\x00', 0x8, 0xa7, &(0x7f0000000400)=""/167, 0x40f00, 0x4, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000004c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0xb, 0x100, 0x7ff}, 0x10, 0x145f8, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[r4, r0, r0]}, 0x80) (async) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000300), 0x42000, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000340)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:44 executing program 2: r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r0, 0x20, &(0x7f00000001c0)={&(0x7f0000000040)=""/170, 0xaa, 0x0, &(0x7f0000000140)=""/128, 0x80}}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:44 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async, rerun: 64) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) (async, rerun: 64) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000200), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x1402, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x1) 20:24:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x0, 0x3, 0x22ef}, @L2TP_ATTR_PROTO_VERSION={0x0, 0x7, 0x3}, @L2TP_ATTR_IP6_SADDR={0x0, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_PROTO_VERSION={0x0, 0x7, 0x2}, @L2TP_ATTR_RECV_SEQ={0x0, 0x12, 0x7}, @L2TP_ATTR_UDP_DPORT={0x0, 0x1b, 0x4e20}, @L2TP_ATTR_VLAN_ID={0x0, 0xe, 0x7}, @L2TP_ATTR_OFFSET, @L2TP_ATTR_DATA_SEQ={0x0, 0x4, 0x7f}]}, 0xffeb}, 0x1, 0x0, 0x0, 0x44814}, 0x40488c1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)) r3 = getpgid(0x0) sched_rr_get_interval(r3, &(0x7f0000000ac0)) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0xdf, 0x8, {r3}, {}, 0x0, 0xc}) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)=0x3) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000100)) 20:24:44 executing program 5: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x1402, 0x4, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x40001) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/user\x00') 20:24:44 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1407, 0x1, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 20:24:44 executing program 2: r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r0, 0x20, &(0x7f00000001c0)={&(0x7f0000000040)=""/170, 0xaa, 0x0, &(0x7f0000000140)=""/128, 0x80}}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r0, 0x20, &(0x7f00000001c0)={&(0x7f0000000040)=""/170, 0xaa, 0x0, &(0x7f0000000140)=""/128, 0x80}}, 0x10) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) 20:24:44 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) (async) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x4) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) 20:24:44 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7e53, 0x80400) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x53, 0x2, 0x1, {0x7f, 0x3f}, {0x8, 0x5}, @const={0x1, {0x38a, 0x0, 0x6, 0x1}}}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:44 executing program 0: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000880}, 0x200088a0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001214200027bd7000fedbdf250800150002000000080415000200000008004b0013007c0e"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4080865) 20:24:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x0, 0x3, 0x22ef}, @L2TP_ATTR_PROTO_VERSION={0x0, 0x7, 0x3}, @L2TP_ATTR_IP6_SADDR={0x0, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_PROTO_VERSION={0x0, 0x7, 0x2}, @L2TP_ATTR_RECV_SEQ={0x0, 0x12, 0x7}, @L2TP_ATTR_UDP_DPORT={0x0, 0x1b, 0x4e20}, @L2TP_ATTR_VLAN_ID={0x0, 0xe, 0x7}, @L2TP_ATTR_OFFSET, @L2TP_ATTR_DATA_SEQ={0x0, 0x4, 0x7f}]}, 0xffeb}, 0x1, 0x0, 0x0, 0x44814}, 0x40488c1) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)) r3 = getpgid(0x0) sched_rr_get_interval(r3, &(0x7f0000000ac0)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0xdf, 0x8, {r3}, {}, 0x0, 0xc}) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)=0x3) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000100)) 20:24:44 executing program 5: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x1402, 0x4, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x40001) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/user\x00') 20:24:44 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1407, 0x1, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x800) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1407, 0x1, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 20:24:44 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7e53, 0x80400) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x53, 0x2, 0x1, {0x7f, 0x3f}, {0x8, 0x5}, @const={0x1, {0x38a, 0x0, 0x6, 0x1}}}) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:44 executing program 5: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x1402, 0x4, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x40001) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/user\x00') 20:24:44 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1407, 0x1, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x800) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1407, 0x1, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x800) (async) 20:24:44 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x38200, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:44 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7e53, 0x80400) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x53, 0x2, 0x1, {0x7f, 0x3f}, {0x8, 0x5}, @const={0x1, {0x38a, 0x0, 0x6, 0x1}}}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') syz_open_dev$evdev(&(0x7f0000000000), 0x7e53, 0x80400) (async) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x53, 0x2, 0x1, {0x7f, 0x3f}, {0x8, 0x5}, @const={0x1, {0x38a, 0x0, 0x6, 0x1}}}) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) 20:24:44 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000000)=0x2) 20:24:44 executing program 0: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000880}, 0x200088a0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001214200027bd7000fedbdf250800150002000000080415000200000008004b0013007c0e"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4080865) 20:24:44 executing program 5: r0 = getpgid(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x80000000, 0xa7a, {r0}, {0xee00}, 0x6a, 0xffffffff}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) r2 = getpgid(r0) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/cgroup\x00') 20:24:44 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x42819ea4d9bf7f28}, 0x40000) 20:24:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2e}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc800}, 0x4800) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:44 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x38200, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x38200, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) 20:24:44 executing program 5: r0 = getpgid(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x80000000, 0xa7a, {r0}, {0xee00}, 0x6a, 0xffffffff}) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) (async) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) (async) r2 = getpgid(r0) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/cgroup\x00') 20:24:44 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async, rerun: 64) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) (rerun: 64) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x42819ea4d9bf7f28}, 0x40000) 20:24:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2e}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc800}, 0x4800) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2e}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) (async) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc800}, 0x4800) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) 20:24:44 executing program 0: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000880}, 0x200088a0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001214200027bd7000fedbdf250800150002000000080415000200000008004b0013007c0e"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4080865) 20:24:44 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000000)=0x2) (async) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000000)=0x2) 20:24:44 executing program 5: r0 = getpgid(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x80000000, 0xa7a, {r0}, {0xee00}, 0x6a, 0xffffffff}) (async, rerun: 32) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) (rerun: 32) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) r2 = getpgid(r0) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/cgroup\x00') 20:24:44 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x42819ea4d9bf7f28}, 0x40000) 20:24:44 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x38200, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async, rerun: 32) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (rerun: 32) 20:24:44 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000040)={@multicast1}}) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b455663b763efd71f54b07ffde24f2a0ad39903086aa78961635299c17c897086c3bc6594b8be21690862aebc468a891536a4239eac028d9078dc0be6d9c256206c700e7d1960eae0e9e959f58f7a61bc7e1b3a79ab349c7bd7e412ec968bad125fe5dc12bc59a7675d44cd197db53dffe6402f3ba20e331945ffefabf7925efd677385a22f72c488d9d181f"], 0x10}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x1402, 0x8, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040040}, 0x24048090) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000004c0)={0x6, &(0x7f0000000480)=[{0x21bf, 0x1, 0x80, 0x9}, {0x0, 0x2, 0x0, 0x9}, {0x7, 0x7f, 0x15, 0x1b}, {0xbd37, 0x9, 0x3, 0x6}, {0x1, 0xb7, 0x5, 0x8}, {0x81, 0x7, 0x1, 0x8001}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x224, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x6000000}, 0x1) 20:24:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2e}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) (async) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc800}, 0x4800) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:44 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) 20:24:44 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000000)=0x2) 20:24:44 executing program 2: ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000000)={0x8, 0x3, 0x9, 0x7d21}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:44 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') socket$nl_rdma(0x10, 0x3, 0x14) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000040)={@multicast1}}) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b455663b763efd71f54b07ffde24f2a0ad39903086aa78961635299c17c897086c3bc6594b8be21690862aebc468a891536a4239eac028d9078dc0be6d9c256206c700e7d1960eae0e9e959f58f7a61bc7e1b3a79ab349c7bd7e412ec968bad125fe5dc12bc59a7675d44cd197db53dffe6402f3ba20e331945ffefabf7925efd677385a22f72c488d9d181f"], 0x10}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) (async) ioctl$PPPIOCDISCONN(r2, 0x7439) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x1402, 0x8, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040040}, 0x24048090) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000004c0)={0x6, &(0x7f0000000480)=[{0x21bf, 0x1, 0x80, 0x9}, {0x0, 0x2, 0x0, 0x9}, {0x7, 0x7f, 0x15, 0x1b}, {0xbd37, 0x9, 0x3, 0x6}, {0x1, 0xb7, 0x5, 0x8}, {0x81, 0x7, 0x1, 0x8001}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x224, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x6000000}, 0x1) (async) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x224, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x6000000}, 0x1) 20:24:44 executing program 1: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x0, 0xbafd0212cae1c4bc, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x1ff, 0x6]}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x1, 0x6, 0x20, 0x1f]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x1407, 0x400, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x800}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c0}, 0x42) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x4c, r0, 0x808, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x34000001}, 0x40) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x58}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x100}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xa5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c050}, 0x10) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r2, 0x600, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4004880) 20:24:44 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:44 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) 20:24:44 executing program 2: ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000000)={0x8, 0x3, 0x9, 0x7d21}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:44 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000040)={@multicast1}}) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b455663b763efd71f54b07ffde24f2a0ad39903086aa78961635299c17c897086c3bc6594b8be21690862aebc468a891536a4239eac028d9078dc0be6d9c256206c700e7d1960eae0e9e959f58f7a61bc7e1b3a79ab349c7bd7e412ec968bad125fe5dc12bc59a7675d44cd197db53dffe6402f3ba20e331945ffefabf7925efd677385a22f72c488d9d181f"], 0x10}}, 0x0) (async, rerun: 32) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x1402, 0x8, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040040}, 0x24048090) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000004c0)={0x6, &(0x7f0000000480)=[{0x21bf, 0x1, 0x80, 0x9}, {0x0, 0x2, 0x0, 0x9}, {0x7, 0x7f, 0x15, 0x1b}, {0xbd37, 0x9, 0x3, 0x6}, {0x1, 0xb7, 0x5, 0x8}, {0x81, 0x7, 0x1, 0x8001}]}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x224, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x6000000}, 0x1) 20:24:45 executing program 1: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x0, 0xbafd0212cae1c4bc, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x1ff, 0x6]}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x1, 0x6, 0x20, 0x1f]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x1407, 0x400, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x800}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c0}, 0x42) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x4c, r0, 0x808, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x34000001}, 0x40) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x58}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x100}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xa5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c050}, 0x10) (async, rerun: 64) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r2, 0x600, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4004880) (rerun: 64) 20:24:45 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) 20:24:45 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000000c0)={0x3, 0x3}) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x2, 0x9, 0x7f}, {0x5, 0x3f, 0x0, 0x3}]}) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:45 executing program 2: ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000000)={0x8, 0x3, 0x9, 0x7d21}) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:45 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid\x00') r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/time\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r0}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x10080) 20:24:45 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:45 executing program 1: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x0, 0xbafd0212cae1c4bc, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x1ff, 0x6]}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x1, 0x6, 0x20, 0x1f]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async, rerun: 32) r1 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x1407, 0x400, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x800}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c0}, 0x42) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x4c, r0, 0x808, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x34000001}, 0x40) (async) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x58}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x100}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xa5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c050}, 0x10) (async, rerun: 64) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r2, 0x600, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4004880) (rerun: 64) 20:24:45 executing program 5: ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x98, &(0x7f0000000000)={0x9, 0x80000000, 0xb}}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000140)={0x0, r0}, 0x10) 20:24:45 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x60a000, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 20:24:45 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid\x00') r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/time\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r0}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x10080) 20:24:45 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000000c0)={0x3, 0x3}) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x2, 0x9, 0x7f}, {0x5, 0x3f, 0x0, 0x3}]}) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:45 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x80a00, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xd0200, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x9, "a3ed548c369a3dd2236683a3793531f25e58aac35beaf3a4594ff6aa5bd6079e"}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x44c082, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r4, 0x7439) write$cgroup_pressure(r4, &(0x7f0000000200)={'some', 0x20, 0xdd, 0x20, 0x4}, 0x2f) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f00000001c0)=0xff) 20:24:45 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x60a000, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x60a000, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) 20:24:45 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) 20:24:45 executing program 5: ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x98, &(0x7f0000000000)={0x9, 0x80000000, 0xb}}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000140)={0x0, r0}, 0x10) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x98, &(0x7f0000000000)={0x9, 0x80000000, 0xb}}) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000140)={0x0, r0}, 0x10) (async) 20:24:45 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) (async) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid\x00') r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/time\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r0}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x10080) 20:24:45 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x80a00, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xd0200, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x9, "a3ed548c369a3dd2236683a3793531f25e58aac35beaf3a4594ff6aa5bd6079e"}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x44c082, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r4, 0x7439) write$cgroup_pressure(r4, &(0x7f0000000200)={'some', 0x20, 0xdd, 0x20, 0x4}, 0x2f) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f00000001c0)=0xff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x80a00, 0x0) (async) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xd0200, 0x0) (async) ioctl$PPPIOCDISCONN(r2, 0x7439) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x9, "a3ed548c369a3dd2236683a3793531f25e58aac35beaf3a4594ff6aa5bd6079e"}) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x44c082, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r4, 0x7439) (async) write$cgroup_pressure(r4, &(0x7f0000000200)={'some', 0x20, 0xdd, 0x20, 0x4}, 0x2f) (async) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f00000001c0)=0xff) (async) 20:24:45 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) (async) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000000c0)={0x3, 0x3}) (async) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x2, 0x9, 0x7f}, {0x5, 0x3f, 0x0, 0x3}]}) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:45 executing program 5: ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x98, &(0x7f0000000000)={0x9, 0x80000000, 0xb}}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000140)={0x0, r0}, 0x10) (rerun: 64) 20:24:45 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x60a000, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 20:24:45 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000000)={0x8}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000100)={0x5, 0x1000, 0x1}) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCUNBRIDGECHAN(r2, 0x7434) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f00000001c0)) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f00000000c0)={{0x3, @addr=0x3}, 0x8, 0x8, 0x9}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') 20:24:45 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x6) 20:24:45 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x1407, 0x200, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x1000c811}, 0x4008105) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x1407, 0x20, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000104}, 0x20000000) ioctl$VFIO_GET_API_VERSION(r2, 0x3b64) 20:24:45 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) (async, rerun: 64) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x80a00, 0x0) (rerun: 64) ioctl$PPPIOCDISCONN(r1, 0x7439) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xd0200, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x9, "a3ed548c369a3dd2236683a3793531f25e58aac35beaf3a4594ff6aa5bd6079e"}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x44c082, 0x0) (async, rerun: 32) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 32) ioctl$PPPIOCDISCONN(r4, 0x7439) (async, rerun: 32) write$cgroup_pressure(r4, &(0x7f0000000200)={'some', 0x20, 0xdd, 0x20, 0x4}, 0x2f) (async, rerun: 32) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f00000001c0)=0xff) 20:24:45 executing program 2: write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={@mcast2, @dev={0xac, 0x14, 0x14, 0x42}, 0xa, 0x13}}) 20:24:45 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000040)=0x40) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:45 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x1407, 0x200, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x1000c811}, 0x4008105) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x1407, 0x20, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000104}, 0x20000000) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x1407, 0x20, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000104}, 0x20000000) ioctl$VFIO_GET_API_VERSION(r2, 0x3b64) 20:24:45 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000000)={0x8}) (async) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000000)={0x8}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000100)={0x5, 0x1000, 0x1}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCUNBRIDGECHAN(r2, 0x7434) (async) ioctl$PPPIOCUNBRIDGECHAN(r2, 0x7434) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f00000001c0)) (async) ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f00000001c0)) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f00000000c0)={{0x3, @addr=0x3}, 0x8, 0x8, 0x9}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') 20:24:45 executing program 1: prctl$PR_CAPBSET_DROP(0x18, 0x14) 20:24:45 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x6) (async) ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x6) 20:24:45 executing program 2: write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={@mcast2, @dev={0xac, 0x14, 0x14, 0x42}, 0xa, 0x13}}) 20:24:45 executing program 1: prctl$PR_CAPBSET_DROP(0x18, 0x14) prctl$PR_CAPBSET_DROP(0x18, 0x14) (async) 20:24:45 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x1407, 0x200, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x1000c811}, 0x4008105) (async, rerun: 32) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async, rerun: 32) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x1407, 0x20, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000104}, 0x20000000) (async) ioctl$VFIO_GET_API_VERSION(r2, 0x3b64) 20:24:45 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000040)=0x40) (async, rerun: 64) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (rerun: 64) 20:24:45 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000000)={0x8}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000100)={0x5, 0x1000, 0x1}) (async) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCUNBRIDGECHAN(r2, 0x7434) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f00000001c0)) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f00000000c0)={{0x3, @addr=0x3}, 0x8, 0x8, 0x9}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') 20:24:45 executing program 2: write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={@mcast2, @dev={0xac, 0x14, 0x14, 0x42}, 0xa, 0x13}}) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={@mcast2, @dev={0xac, 0x14, 0x14, 0x42}, 0xa, 0x13}}) (async) 20:24:45 executing program 1: prctl$PR_CAPBSET_DROP(0x18, 0x14) 20:24:45 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x6) 20:24:45 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000040)=0x40) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:45 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) 20:24:45 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x1) 20:24:45 executing program 5: getpgrp(0x0) r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/time\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') 20:24:45 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x41) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000000)={0x51, 0x3f, 0x2, {0x37, 0x8f}, {0xff, 0x9}, @ramp={0x8000, 0xff80, {0xc26, 0x5a2, 0x1, 0xfbe}}}) 20:24:45 executing program 4: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x141000, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x78, 0x9, 0x8, 0x10d0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8, 0x0, 0x0, 0x210, 0xffffffffffffffff, 0xe33, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0x6}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x2, &(0x7f0000000140)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xfffeffff}], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000800)=""/4096, 0x0, 0x14, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000300)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xb, 0x10001, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, r4, r5, 0x1]}, 0x80) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000029c0000bac0ba094eb1044de946e047b21eb734b16e41aa04170d0d2ddb6b12083f1962c163cf4ea3d166033d7b64da2f151b6b01e6acdabb964c2c2876e662e6dca244f2215047f60db33c4845bf42ec76e41bff61a115fcc029119a14d8f76e91b069bbc0965a70a0afff9875dd45ff256ebeebff2cb78baadbb47574cca884344b082e487246f72c649f1815dfeca14677dd0d559c17ea0dfdf631ce1367e4b9b8294e1ff21694d1"], 0x14}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$vhost_msg(r6, &(0x7f0000000700)={0x1, {&(0x7f0000000580)=""/79, 0x4f, &(0x7f0000000600)=""/230, 0x3, 0x2}}, 0x48) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:45 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 64) ioctl$PPPIOCDISCONN(r1, 0x7439) (async, rerun: 64) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x1) (rerun: 64) 20:24:45 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) ioctl$PPPIOCDISCONN(r0, 0x7439) 20:24:46 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x41) (async, rerun: 64) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000000)={0x51, 0x3f, 0x2, {0x37, 0x8f}, {0xff, 0x9}, @ramp={0x8000, 0xff80, {0xc26, 0x5a2, 0x1, 0xfbe}}}) (rerun: 64) 20:24:46 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) 20:24:46 executing program 5: getpgrp(0x0) r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/time\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') 20:24:46 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x41) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000000)={0x51, 0x3f, 0x2, {0x37, 0x8f}, {0xff, 0x9}, @ramp={0x8000, 0xff80, {0xc26, 0x5a2, 0x1, 0xfbe}}}) 20:24:46 executing program 4: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x141000, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x78, 0x9, 0x8, 0x10d0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8, 0x0, 0x0, 0x210, 0xffffffffffffffff, 0xe33, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0x6}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x2, &(0x7f0000000140)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xfffeffff}], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000800)=""/4096, 0x0, 0x14, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000300)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xb, 0x10001, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, r4, r5, 0x1]}, 0x80) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000029c0000bac0ba094eb1044de946e047b21eb734b16e41aa04170d0d2ddb6b12083f1962c163cf4ea3d166033d7b64da2f151b6b01e6acdabb964c2c2876e662e6dca244f2215047f60db33c4845bf42ec76e41bff61a115fcc029119a14d8f76e91b069bbc0965a70a0afff9875dd45ff256ebeebff2cb78baadbb47574cca884344b082e487246f72c649f1815dfeca14677dd0d559c17ea0dfdf631ce1367e4b9b8294e1ff21694d1"], 0x14}}, 0x0) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$vhost_msg(r6, &(0x7f0000000700)={0x1, {&(0x7f0000000580)=""/79, 0x4f, &(0x7f0000000600)=""/230, 0x3, 0x2}}, 0x48) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:46 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) 20:24:46 executing program 5: getpgrp(0x0) (async) r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/time\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') 20:24:46 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) ioctl$PPPIOCDISCONN(r1, 0x7439) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x1) 20:24:46 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async, rerun: 32) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) 20:24:46 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000140)={0x107, 0x1, 0x8001, 0x6, "5c533ae87a7b135874caeafbe9434ded18fb497cbbb281b9931b6bfac3c9df4b4d256119f0f503dea63c657d843defeb7db35a65d871c4e08c1f377ff1ae6b3ee57a9b028a80f4d6e25c51a33cb4ac2b7afdb19601abd95382174648f544833e914ccbc03452d69facde7a32245ff1dc9fcbb22e2cebb7c1c90ba78f20f408b2ea5bcb50b7c8041c0a1622a82a96b28b55c18b417b9f08f92a11dbe8fe52e6291f64d3d7b23cf17584c36c509f7b4c8099b7fa2162642ae689953b05f00a04427eb2070335fbf7f9a0f90d4a53c5c0c429742c50e0d3ca5f8ab7e46b10f35c5879ed4966bbd4753154f41f9bf8881f"}) 20:24:46 executing program 4: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x141000, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x78, 0x9, 0x8, 0x10d0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8, 0x0, 0x0, 0x210, 0xffffffffffffffff, 0xe33, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0x6}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x2, &(0x7f0000000140)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xfffeffff}], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000800)=""/4096, 0x0, 0x14, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000300)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xb, 0x10001, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, r4, r5, 0x1]}, 0x80) (async) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000029c0000bac0ba094eb1044de946e047b21eb734b16e41aa04170d0d2ddb6b12083f1962c163cf4ea3d166033d7b64da2f151b6b01e6acdabb964c2c2876e662e6dca244f2215047f60db33c4845bf42ec76e41bff61a115fcc029119a14d8f76e91b069bbc0965a70a0afff9875dd45ff256ebeebff2cb78baadbb47574cca884344b082e487246f72c649f1815dfeca14677dd0d559c17ea0dfdf631ce1367e4b9b8294e1ff21694d1"], 0x14}}, 0x0) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) (async) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$vhost_msg(r6, &(0x7f0000000700)={0x1, {&(0x7f0000000580)=""/79, 0x4f, &(0x7f0000000600)=""/230, 0x3, 0x2}}, 0x48) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:46 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x10202, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r5, 0x7439) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5}, 0x80) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r4, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_TID={0xc}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x8040) ioctl$ASHMEM_GET_NAME(r5, 0x81007702, &(0x7f00000006c0)=""/4096) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x18, 0x1402, 0x200, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}]}, 0x18}, 0x1, 0x0, 0x0, 0x2feb798f68021578}, 0x20000040) sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x43}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4814}, 0x44000) 20:24:46 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') inotify_init1(0x80800) 20:24:46 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async, rerun: 32) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000140)={0x107, 0x1, 0x8001, 0x6, "5c533ae87a7b135874caeafbe9434ded18fb497cbbb281b9931b6bfac3c9df4b4d256119f0f503dea63c657d843defeb7db35a65d871c4e08c1f377ff1ae6b3ee57a9b028a80f4d6e25c51a33cb4ac2b7afdb19601abd95382174648f544833e914ccbc03452d69facde7a32245ff1dc9fcbb22e2cebb7c1c90ba78f20f408b2ea5bcb50b7c8041c0a1622a82a96b28b55c18b417b9f08f92a11dbe8fe52e6291f64d3d7b23cf17584c36c509f7b4c8099b7fa2162642ae689953b05f00a04427eb2070335fbf7f9a0f90d4a53c5c0c429742c50e0d3ca5f8ab7e46b10f35c5879ed4966bbd4753154f41f9bf8881f"}) (rerun: 32) 20:24:46 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) 20:24:46 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a10c3, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) 20:24:46 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x10202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) (async) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r5, 0x7439) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5}, 0x80) (async) sendmsg$SMC_PNETID_FLUSH(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5}, 0x80) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r4, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_TID={0xc}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x8040) (async) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r4, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_TID={0xc}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x8040) ioctl$ASHMEM_GET_NAME(r5, 0x81007702, &(0x7f00000006c0)=""/4096) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x18, 0x1402, 0x200, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}]}, 0x18}, 0x1, 0x0, 0x0, 0x2feb798f68021578}, 0x20000040) sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x43}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4814}, 0x44000) 20:24:46 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x131001, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, 0x1403, 0xc00, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'nr0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_virt_wifi\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000802}, 0x40850) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:46 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async, rerun: 64) inotify_init1(0x80800) (rerun: 64) 20:24:46 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000140)={0x107, 0x1, 0x8001, 0x6, "5c533ae87a7b135874caeafbe9434ded18fb497cbbb281b9931b6bfac3c9df4b4d256119f0f503dea63c657d843defeb7db35a65d871c4e08c1f377ff1ae6b3ee57a9b028a80f4d6e25c51a33cb4ac2b7afdb19601abd95382174648f544833e914ccbc03452d69facde7a32245ff1dc9fcbb22e2cebb7c1c90ba78f20f408b2ea5bcb50b7c8041c0a1622a82a96b28b55c18b417b9f08f92a11dbe8fe52e6291f64d3d7b23cf17584c36c509f7b4c8099b7fa2162642ae689953b05f00a04427eb2070335fbf7f9a0f90d4a53c5c0c429742c50e0d3ca5f8ab7e46b10f35c5879ed4966bbd4753154f41f9bf8881f"}) 20:24:46 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a10c3, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) 20:24:46 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r0, 0x7434) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0xfffffffc) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:46 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x131001, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, 0x1403, 0xc00, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'nr0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_virt_wifi\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000802}, 0x40850) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:46 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x10202, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r5, 0x7439) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5}, 0x80) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r4, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_TID={0xc}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x8040) ioctl$ASHMEM_GET_NAME(r5, 0x81007702, &(0x7f00000006c0)=""/4096) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x18, 0x1402, 0x200, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}]}, 0x18}, 0x1, 0x0, 0x0, 0x2feb798f68021578}, 0x20000040) sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x43}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4814}, 0x44000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x10202, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) (async) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r5, 0x7439) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_FLUSH(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5}, 0x80) (async) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r4, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_TID={0xc}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x8040) (async) ioctl$ASHMEM_GET_NAME(r5, 0x81007702, &(0x7f00000006c0)=""/4096) (async) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x18, 0x1402, 0x200, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}]}, 0x18}, 0x1, 0x0, 0x0, 0x2feb798f68021578}, 0x20000040) (async) sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x43}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4814}, 0x44000) (async) 20:24:46 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a10c3, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) 20:24:46 executing program 2: sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x400c840) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x8802, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f00000003c0), 0x7, 0x8000) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1410, 0x10, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x8000) 20:24:46 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x131001, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, 0x1403, 0xc00, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'nr0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_virt_wifi\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000802}, 0x40850) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:46 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') inotify_init1(0x80800) 20:24:46 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r0, 0x7434) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0xfffffffc) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCUNBRIDGECHAN(r0, 0x7434) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0xfffffffc) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (async) 20:24:46 executing program 1: sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1405, 0x2, 0x70bd25, 0x25dfdbfc, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:46 executing program 2: sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x400c840) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x8802, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f00000003c0), 0x7, 0x8000) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1410, 0x10, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x8000) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x400c840) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x8802, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r2, 0x7439) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f0000000000)) (async) syz_open_dev$dri(&(0x7f00000003c0), 0x7, 0x8000) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1410, 0x10, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x8000) (async) 20:24:46 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x82001, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x1407, 0x4, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x1409, 0x2, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') 20:24:46 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) 20:24:46 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x20a000, 0x0) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f0000000200)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000007c0)=0x3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f00000000c0)=0x3) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$PPPIOCSDEBUG(r5, 0x40047440, &(0x7f0000000180)=0xd14) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$PPPIOCGIDLE(r5, 0x8010743f, &(0x7f0000000040)) 20:24:46 executing program 2: sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x400c840) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x8802, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) (async) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f0000000000)) (async) syz_open_dev$dri(&(0x7f00000003c0), 0x7, 0x8000) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1410, 0x10, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x8000) 20:24:46 executing program 1: sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1405, 0x2, 0x70bd25, 0x25dfdbfc, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:46 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x82001, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x1407, 0x4, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x1409, 0x2, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x1409, 0x2, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') 20:24:46 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r0, 0x7434) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0xfffffffc) (async, rerun: 32) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (rerun: 32) 20:24:46 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) (async) 20:24:46 executing program 1: sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1405, 0x2, 0x70bd25, 0x25dfdbfc, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:46 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x82001, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x82001, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x1407, 0x4, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x1407, 0x4, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x1409, 0x2, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') 20:24:46 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffffd}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_bridge\x00'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2044001}, 0x1) 20:24:46 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) (async, rerun: 64) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)) (rerun: 64) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x20a000, 0x0) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f0000000200)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000007c0)=0x3) (async, rerun: 64) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (rerun: 64) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f00000000c0)=0x3) (async, rerun: 32) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) (rerun: 32) ioctl$PPPIOCSDEBUG(r5, 0x40047440, &(0x7f0000000180)=0xd14) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) (async) ioctl$PPPIOCGIDLE(r5, 0x8010743f, &(0x7f0000000040)) 20:24:46 executing program 1: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4080}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1403, 0x200, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gretap0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100000c0}, 0x20000000) 20:24:46 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffffd}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_bridge\x00'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2044001}, 0x1) 20:24:46 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) (async) 20:24:46 executing program 3: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000040)=0x40400) 20:24:46 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffffd}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_bridge\x00'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2044001}, 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffffd}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_bridge\x00'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2044001}, 0x1) (async) 20:24:46 executing program 1: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4080}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1403, 0x200, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gretap0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100000c0}, 0x20000000) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4080}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1403, 0x200, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gretap0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100000c0}, 0x20000000) 20:24:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000808) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') 20:24:47 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time\x00') socket$inet6_udplite(0xa, 0x2, 0x88) 20:24:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000808) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000808) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) 20:24:47 executing program 1: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async, rerun: 32) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async, rerun: 32) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4080}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1403, 0x200, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gretap0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100000c0}, 0x20000000) 20:24:47 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 32) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x20a000, 0x0) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f0000000200)) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000007c0)=0x3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f00000000c0)=0x3) (async, rerun: 32) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) (rerun: 32) ioctl$PPPIOCSDEBUG(r5, 0x40047440, &(0x7f0000000180)=0xd14) (async, rerun: 64) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) (async, rerun: 64) ioctl$PPPIOCGIDLE(r5, 0x8010743f, &(0x7f0000000040)) 20:24:47 executing program 2: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:47 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time\x00') socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time\x00') (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) 20:24:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000808) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000808) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') 20:24:47 executing program 2: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) 20:24:47 executing program 3: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000040)=0x40400) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000040)=0x40400) (async) 20:24:47 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') 20:24:47 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time\x00') (async) socket$inet6_udplite(0xa, 0x2, 0x88) 20:24:47 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') 20:24:47 executing program 2: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) 20:24:47 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') 20:24:47 executing program 5: seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000000c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@int={0x5, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x8}}]}, {0x0, [0x5f, 0x0, 0x30, 0x2e]}}, &(0x7f0000000240)=""/242, 0x46, 0xf2, 0x1}, 0x20) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x0, 0x7}}) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000000)={0x0, 0x4, 0xfffffff7, 0x8, 0xfb4e, 0xba31, 0x19, 0x80, 0x8, 0xffff, 0x5, 0x2}) 20:24:47 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa4102, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x210000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x80004) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000000)) 20:24:47 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r0, 0x7434) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:47 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') (async) 20:24:47 executing program 5: seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000000c0)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@int={0x5, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x8}}]}, {0x0, [0x5f, 0x0, 0x30, 0x2e]}}, &(0x7f0000000240)=""/242, 0x46, 0xf2, 0x1}, 0x20) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async, rerun: 32) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x0, 0x7}}) (async, rerun: 32) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (rerun: 32) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000000)={0x0, 0x4, 0xfffffff7, 0x8, 0xfb4e, 0xba31, 0x19, 0x80, 0x8, 0xffff, 0x5, 0x2}) 20:24:47 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') 20:24:47 executing program 3: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000040)=0x40400) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000040)=0x40400) (async) 20:24:47 executing program 1: ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000040)={0x8, 0x5}) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/ipc\x00') 20:24:47 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') (async) 20:24:47 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r0, 0x7434) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) (async) ioctl$PPPIOCUNBRIDGECHAN(r0, 0x7434) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) 20:24:47 executing program 5: seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000000c0)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@int={0x5, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x8}}]}, {0x0, [0x5f, 0x0, 0x30, 0x2e]}}, &(0x7f0000000240)=""/242, 0x46, 0xf2, 0x1}, 0x20) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x0, 0x7}}) (async) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000000)={0x0, 0x4, 0xfffffff7, 0x8, 0xfb4e, 0xba31, 0x19, 0x80, 0x8, 0xffff, 0x5, 0x2}) 20:24:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x200000) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x44014}, 0x48045) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') 20:24:47 executing program 1: ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000040)={0x8, 0x5}) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/ipc\x00') 20:24:47 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa4102, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x210000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x80004) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa4102, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x210000, 0x0) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x80004) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000000)) (async) 20:24:47 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r0, 0x7434) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) (async) ioctl$PPPIOCUNBRIDGECHAN(r0, 0x7434) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) 20:24:47 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x200000) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x44014}, 0x48045) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') 20:24:47 executing program 2: r0 = getpgid(0x0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) 20:24:47 executing program 3: sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={&(0x7f0000000040)=@canfd={{0x2, 0x0, 0x1}, 0x17, 0x0, 0x0, 0x0, "ebf998c4e0af31d2174887d0e00555fdf72eb299170ad8c34845f0f5c7dae3f056bb66d761ca4809b727e520033b9dd39e26f0174789d7b117ec7df77c25bd29"}, 0x48}, 0x1, 0x0, 0x0, 0x24000800}, 0x8880) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0xc01, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) inotify_init() ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f00000001c0)) 20:24:47 executing program 1: ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000040)={0x8, 0x5}) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/ipc\x00') ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000040)={0x8, 0x5}) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/ipc\x00') (async) 20:24:47 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x200000) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x44014}, 0x48045) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (rerun: 32) 20:24:47 executing program 2: r0 = getpgid(0x0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) getpgid(0x0) (async) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) (async) 20:24:47 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa4102, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x210000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x80004) (async, rerun: 64) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async, rerun: 64) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000000)) 20:24:47 executing program 1: inotify_init1(0x0) 20:24:47 executing program 3: sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={&(0x7f0000000040)=@canfd={{0x2, 0x0, 0x1}, 0x17, 0x0, 0x0, 0x0, "ebf998c4e0af31d2174887d0e00555fdf72eb299170ad8c34845f0f5c7dae3f056bb66d761ca4809b727e520033b9dd39e26f0174789d7b117ec7df77c25bd29"}, 0x48}, 0x1, 0x0, 0x0, 0x24000800}, 0x8880) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0xc01, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) inotify_init() (async) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f00000001c0)) 20:24:47 executing program 0: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') 20:24:47 executing program 1: inotify_init1(0x0) 20:24:47 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:47 executing program 2: r0 = getpgid(0x0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) 20:24:47 executing program 3: sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={&(0x7f0000000040)=@canfd={{0x2, 0x0, 0x1}, 0x17, 0x0, 0x0, 0x0, "ebf998c4e0af31d2174887d0e00555fdf72eb299170ad8c34845f0f5c7dae3f056bb66d761ca4809b727e520033b9dd39e26f0174789d7b117ec7df77c25bd29"}, 0x48}, 0x1, 0x0, 0x0, 0x24000800}, 0x8880) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0xc01, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) inotify_init() ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f00000001c0)) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={&(0x7f0000000040)=@canfd={{0x2, 0x0, 0x1}, 0x17, 0x0, 0x0, 0x0, "ebf998c4e0af31d2174887d0e00555fdf72eb299170ad8c34845f0f5c7dae3f056bb66d761ca4809b727e520033b9dd39e26f0174789d7b117ec7df77c25bd29"}, 0x48}, 0x1, 0x0, 0x0, 0x24000800}, 0x8880) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0xc01, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (async) inotify_init() (async) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f00000001c0)) (async) 20:24:47 executing program 1: inotify_init1(0x0) 20:24:48 executing program 0: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') 20:24:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a61e90832956fc761a044114000000", @ANYRES16=r1, @ANYBLOB="1107000000000000000003000000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6202}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x20000000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) 20:24:48 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8444, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000040)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:48 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1409, 0x0, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4090}, 0x4000000) 20:24:48 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:48 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa003, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000200)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x1, 0x6, 0xb}}) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000000)) ioctl$PPPIOCDISCONN(r0, 0x7439) 20:24:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a61e90832956fc761a044114000000", @ANYRES16=r1, @ANYBLOB="1107000000000000000003000000"], 0x14}}, 0x0) (async) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6202}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x20000000) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) 20:24:48 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:48 executing program 0: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') 20:24:48 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1409, 0x0, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4090}, 0x4000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1409, 0x0, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4090}, 0x4000000) (async) 20:24:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a61e90832956fc761a044114000000", @ANYRES16=r1, @ANYBLOB="1107000000000000000003000000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6202}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x20000000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) 20:24:48 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa003, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000200)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x1, 0x6, 0xb}}) (async) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000000)) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) 20:24:48 executing program 0: ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x1, 0x31, @ipv4={'\x00', '\xff\xff', @empty}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x20, 0x2, 0x5}}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r4, 0x7439) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_LINK={0x8, 0x1, r0}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3d}}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x20008011) 20:24:48 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1409, 0x0, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4090}, 0x4000000) 20:24:48 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8444, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000040)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8444, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x6) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000040)) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) 20:24:48 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040), 0x12140, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000080)={0x30}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000000)=0x566b) 20:24:48 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) 20:24:48 executing program 0: ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x1, 0x31, @ipv4={'\x00', '\xff\xff', @empty}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x20, 0x2, 0x5}}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r4, 0x7439) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_LINK={0x8, 0x1, r0}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3d}}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x20008011) (async) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_LINK={0x8, 0x1, r0}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3d}}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x20008011) 20:24:48 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa003, 0x0) (async) r2 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000200)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x1, 0x6, 0xb}}) (async) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x4) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000000)) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) 20:24:48 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x8000, 0x8, 0xfff, 0x9, {{0x11, 0x4, 0x0, 0x3b, 0x44, 0x65, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @broadcast, {[@end, @timestamp_addr={0x44, 0x2c, 0x41, 0x1, 0xc, [{@remote, 0x40}, {@multicast1, 0x7}, {@remote, 0x9}, {@rand_addr=0x64010101, 0xffffff6c}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}]}}}}}) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:48 executing program 5: sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xd8, 0x1403, 0x300, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pim6reg1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve1\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:48 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000000)=0x2f) 20:24:48 executing program 0: ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x1, 0x31, @ipv4={'\x00', '\xff\xff', @empty}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x20, 0x2, 0x5}}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r4, 0x7439) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_LINK={0x8, 0x1, r0}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3d}}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x20008011) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x1, 0x31, @ipv4={'\x00', '\xff\xff', @empty}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x20, 0x2, 0x5}}) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r4, 0x7439) (async) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_LINK={0x8, 0x1, r0}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3d}}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x20008011) (async) 20:24:48 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8444, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000040)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8444, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x6) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000040)) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) 20:24:48 executing program 5: sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xd8, 0x1403, 0x300, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pim6reg1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve1\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xd8, 0x1403, 0x300, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pim6reg1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve1\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) 20:24:48 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040), 0x12140, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000080)={0x30}) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000000)=0x566b) 20:24:48 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x8000, 0x8, 0xfff, 0x9, {{0x11, 0x4, 0x0, 0x3b, 0x44, 0x65, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @broadcast, {[@end, @timestamp_addr={0x44, 0x2c, 0x41, 0x1, 0xc, [{@remote, 0x40}, {@multicast1, 0x7}, {@remote, 0x9}, {@rand_addr=0x64010101, 0xffffff6c}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}]}}}}}) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) (async) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:48 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') 20:24:48 executing program 5: sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xd8, 0x1403, 0x300, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pim6reg1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve1\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xd8, 0x1403, 0x300, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pim6reg1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve1\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) 20:24:48 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x8000, 0x8, 0xfff, 0x9, {{0x11, 0x4, 0x0, 0x3b, 0x44, 0x65, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @broadcast, {[@end, @timestamp_addr={0x44, 0x2c, 0x41, 0x1, 0xc, [{@remote, 0x40}, {@multicast1, 0x7}, {@remote, 0x9}, {@rand_addr=0x64010101, 0xffffff6c}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}]}}}}}) (async, rerun: 64) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:48 executing program 2: sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002dbd7000fddbdf2505000012000400000006001c000000000006001d00ff0f000008000b00040000000800f200b61e000085d5efad597a67218d88a7c8435d7a86ed5a6ffb531bd1c40da1357bd75a01ae5aecfa66b31070f6d0b54dc6a173f4631bc588d107039ee40c8ae3"], 0x3c}, 0x1, 0x0, 0x0, 0x894}, 0x40041) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x2200, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000400), r1) sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r4, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netdevsim0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0d0}, 0x44800) 20:24:48 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') 20:24:48 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000000)=0x2f) 20:24:48 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040), 0x12140, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000080)={0x30}) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000000)=0x566b) 20:24:48 executing program 1: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) r2 = getpgid(0x0) sched_rr_get_interval(r2, &(0x7f0000000ac0)) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/user\x00') 20:24:48 executing program 5: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid\x00') 20:24:48 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') (async) 20:24:48 executing program 2: sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002dbd7000fddbdf2505000012000400000006001c000000000006001d00ff0f000008000b00040000000800f200b61e000085d5efad597a67218d88a7c8435d7a86ed5a6ffb531bd1c40da1357bd75a01ae5aecfa66b31070f6d0b54dc6a173f4631bc588d107039ee40c8ae3"], 0x3c}, 0x1, 0x0, 0x0, 0x894}, 0x40041) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x80) (async) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x2200, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) (async) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000400), r1) sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r4, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netdevsim0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0d0}, 0x44800) 20:24:48 executing program 5: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid\x00') fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) (async) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid\x00') (async) 20:24:48 executing program 1: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) r2 = getpgid(0x0) sched_rr_get_interval(r2, &(0x7f0000000ac0)) (async) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/user\x00') 20:24:48 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0xc, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20001) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc0044080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c0}, 0x4001) 20:24:48 executing program 2: sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002dbd7000fddbdf2505000012000400000006001c000000000006001d00ff0f000008000b00040000000800f200b61e000085d5efad597a67218d88a7c8435d7a86ed5a6ffb531bd1c40da1357bd75a01ae5aecfa66b31070f6d0b54dc6a173f4631bc588d107039ee40c8ae3"], 0x3c}, 0x1, 0x0, 0x0, 0x894}, 0x40041) (async, rerun: 64) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async, rerun: 64) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x80) (async, rerun: 64) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async, rerun: 32) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x2200, 0x0) (rerun: 32) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) (async) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000400), r1) sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r4, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netdevsim0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0d0}, 0x44800) 20:24:48 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000040)=0x7) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:48 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0xc, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20001) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc0044080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c0}, 0x4001) 20:24:48 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000000)=0x2f) 20:24:48 executing program 5: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid\x00') fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) (async) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid\x00') (async) 20:24:48 executing program 1: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) (async) r2 = getpgid(0x0) sched_rr_get_interval(r2, &(0x7f0000000ac0)) (async) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/user\x00') 20:24:48 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0xc, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20001) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc0044080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c0}, 0x4001) 20:24:48 executing program 2: ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x7, 0x800, {0xffffffffffffffff}, {}, 0x80, 0xffffffffffffffff}) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/ipc\x00') ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)) 20:24:48 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x140e, 0x400, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000084) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000340)=0x3) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x1405, 0x4, 0x70bd29, 0x25dfdbff, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/cgroup\x00') 20:24:49 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000040)=0x7) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:49 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_O_TEI={0x8}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2400c090) 20:24:49 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x32012, &(0x7f0000000280)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x400}}, {@blksize={'blksize', 0x3d, 0x600}}], [{@dont_hash}, {@smackfsdef={'smackfsdef', 0x3d, 'rootmode'}}]}}, 0x0, 0x0, &(0x7f00000000c0)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') 20:24:49 executing program 2: ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x7, 0x800, {0xffffffffffffffff}, {}, 0x80, 0xffffffffffffffff}) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/ipc\x00') (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)) 20:24:49 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_O_TEI={0x8}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2400c090) (async) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_O_TEI={0x8}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2400c090) 20:24:49 executing program 2: ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x7, 0x800, {0xffffffffffffffff}, {}, 0x80, 0xffffffffffffffff}) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/ipc\x00') ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x7, 0x800, {0xffffffffffffffff}, {}, 0x80, 0xffffffffffffffff}) (async) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/ipc\x00') (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)) (async) 20:24:49 executing program 3: sysfs$3(0x3) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40081, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000040)=0x2) 20:24:49 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x140e, 0x400, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000084) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000340)=0x3) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x1405, 0x4, 0x70bd29, 0x25dfdbff, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/cgroup\x00') 20:24:49 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000040)=0x7) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000040)=0x7) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) 20:24:49 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x32012, &(0x7f0000000280)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x400}}, {@blksize={'blksize', 0x3d, 0x600}}], [{@dont_hash}, {@smackfsdef={'smackfsdef', 0x3d, 'rootmode'}}]}}, 0x0, 0x0, &(0x7f00000000c0)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x32012, &(0x7f0000000280)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x400}}, {@blksize={'blksize', 0x3d, 0x600}}], [{@dont_hash}, {@smackfsdef={'smackfsdef', 0x3d, 'rootmode'}}]}}, 0x0, 0x0, &(0x7f00000000c0)) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') (async) 20:24:49 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_O_TEI={0x8}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2400c090) 20:24:49 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x240448c4) 20:24:49 executing program 3: sysfs$3(0x3) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40081, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000040)=0x2) sysfs$3(0x3) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) (async) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40081, 0x0) (async) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000040)=0x2) (async) 20:24:49 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x32012, &(0x7f0000000280)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x400}}, {@blksize={'blksize', 0x3d, 0x600}}], [{@dont_hash}, {@smackfsdef={'smackfsdef', 0x3d, 'rootmode'}}]}}, 0x0, 0x0, &(0x7f00000000c0)) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') 20:24:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x20}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="000426bd7000fddbdf2502000000080003000700000004000400080003000500000018000400170e00000200000001800000ff000000010000000c000400c0000000ff010000180004000180ffffff03000085000000fcffffff0600000008000300040000000500050004000000080003000104001b0500060004000000"], 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') 20:24:49 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) (async, rerun: 64) r1 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x140e, 0x400, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000084) (async, rerun: 32) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) (async, rerun: 64) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000340)=0x3) (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x1405, 0x4, 0x70bd29, 0x25dfdbff, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) (async) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/cgroup\x00') 20:24:49 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x240448c4) 20:24:49 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x8c00, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x20}, 0x14}}, 0x0) (async, rerun: 64) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="000426bd7000fddbdf2502000000080003000700000004000400080003000500000018000400170e00000200000001800000ff000000010000000c000400c0000000ff010000180004000180ffffff03000085000000fcffffff0600000008000300040000000500050004000000080003000104001b0500060004000000"], 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (rerun: 32) 20:24:49 executing program 5: sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800ff00", @ANYRES16=0x0, @ANYBLOB="000129bd7000fddbdf250300000008001700", @ANYRES32, @ANYBLOB="05002200000000000c001000646400000000000006001b004e2300000c000f00000000000000008006001b004e230000050013005900000008000a00000000000c00100000000100000000000500220001000000"], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040800}, 0x80d4) 20:24:49 executing program 5: sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800ff00", @ANYRES16=0x0, @ANYBLOB="000129bd7000fddbdf250300000008001700", @ANYRES32, @ANYBLOB="05002200000000000c001000646400000000000006001b004e2300000c000f00000000000000008006001b004e230000050013005900000008000a00000000000c00100000000100000000000500220001000000"], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040800}, 0x80d4) 20:24:49 executing program 3: sysfs$3(0x3) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40081, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000040)=0x2) sysfs$3(0x3) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) (async) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40081, 0x0) (async) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000040)=0x2) (async) 20:24:49 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x240448c4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x240448c4) (async) 20:24:49 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x8c00, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:49 executing program 5: sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800ff00", @ANYRES16=0x0, @ANYBLOB="000129bd7000fddbdf250300000008001700", @ANYRES32, @ANYBLOB="05002200000000000c001000646400000000000006001b004e2300000c000f00000000000000008006001b004e230000050013005900000008000a00000000000c00100000000100000000000500220001000000"], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040800}, 0x80d4) 20:24:49 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xd8002, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x248202, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f0000000200)) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r3) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) 20:24:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x20}, 0x14}}, 0x0) (async) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="000426bd7000fddbdf2502000000080003000700000004000400080003000500000018000400170e00000200000001800000ff000000010000000c000400c0000000ff010000180004000180ffffff03000085000000fcffffff0600000008000300040000000500050004000000080003000104001b0500060004000000"], 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') 20:24:49 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1407, 0x100, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) 20:24:49 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') 20:24:49 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xd8002, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x248202, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f0000000200)) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r3) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) (async) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) 20:24:49 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x8c00, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x8c00, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) 20:24:49 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x140b, 0x8, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 20:24:49 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1407, 0x100, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) 20:24:49 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)=0x7) 20:24:49 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xd8002, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xd8002, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x248202, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f0000000200)) (async) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f0000000200)) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r3) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r3) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) 20:24:49 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') 20:24:49 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x1) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000040)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) 20:24:49 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1407, 0x100, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1407, 0x100, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) (async) 20:24:49 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x140b, 0x8, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x140b, 0x8, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 20:24:49 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') (async) 20:24:49 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000900000000000800090000000000"], 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4000800) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000000)) 20:24:49 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)=0x7) 20:24:49 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x801100}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000214010028bd700000000027050054000100000008a274fc7084a5d837f52a92fe4cb7ff4243366bf76a97527725de421bab1350b08cd67df6264f3a94c121f5b89ee39ab8ebc9707d86f0a1ea9590b62016bb0f6010f2e5970808bbce05b3e1ebd94f68dd133bb6eede840e4d7b2c60b97ec06aef7c04c2d2467b87944b628522f7dd983998434f20cba93d17271dcf09a25ed3609b47d2af72a4ff5690353d369ed4d56365aaf2ca4f28ef4c50a311176753f4982e108e595bbb21a4d7a532fec67c0f5f2d6b0bdd04b242689fdb29ac6ddfcabf5b5571a8bc4905f806d6c218"], 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x40008c0) 20:24:49 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x140b, 0x8, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 20:24:49 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x801100}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000214010028bd700000000027050054000100000008a274fc7084a5d837f52a92fe4cb7ff4243366bf76a97527725de421bab1350b08cd67df6264f3a94c121f5b89ee39ab8ebc9707d86f0a1ea9590b62016bb0f6010f2e5970808bbce05b3e1ebd94f68dd133bb6eede840e4d7b2c60b97ec06aef7c04c2d2467b87944b628522f7dd983998434f20cba93d17271dcf09a25ed3609b47d2af72a4ff5690353d369ed4d56365aaf2ca4f28ef4c50a311176753f4982e108e595bbb21a4d7a532fec67c0f5f2d6b0bdd04b242689fdb29ac6ddfcabf5b5571a8bc4905f806d6c218"], 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x40008c0) 20:24:49 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x1) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) 20:24:49 executing program 2: r0 = getpgid(0x0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/user\x00') 20:24:49 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000900000000000800090000000000"], 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4000800) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) (async) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000900000000000800090000000000"], 0x24}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4000800) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000000)) (async) 20:24:50 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)=0x7) 20:24:50 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x801100}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000214010028bd700000000027050054000100000008a274fc7084a5d837f52a92fe4cb7ff4243366bf76a97527725de421bab1350b08cd67df6264f3a94c121f5b89ee39ab8ebc9707d86f0a1ea9590b62016bb0f6010f2e5970808bbce05b3e1ebd94f68dd133bb6eede840e4d7b2c60b97ec06aef7c04c2d2467b87944b628522f7dd983998434f20cba93d17271dcf09a25ed3609b47d2af72a4ff5690353d369ed4d56365aaf2ca4f28ef4c50a311176753f4982e108e595bbb21a4d7a532fec67c0f5f2d6b0bdd04b242689fdb29ac6ddfcabf5b5571a8bc4905f806d6c218"], 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x40008c0) 20:24:50 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x1) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) 20:24:50 executing program 2: r0 = getpgid(0x0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/user\x00') 20:24:50 executing program 0: r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x19, 0xa, 'ns/time_for_children\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4040) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r4, 0x7439) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="10002dbd7000ffdbdf25020000003400078008000100862e177277ff2f37c7dab80b165f0f77a7e22a152b792af55f563c79c3eeaf9d1e9d3722fd8eba638a982c6c81c2c4897ba1e9c85b7b3d4fbcebc532738cae174f05", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100000000000c0006000200000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r5, 0x600, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x24000001) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00') 20:24:50 executing program 5: r0 = getpgid(0x0) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) getpgrp(r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x111, 0x5}}, 0x20) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={&(0x7f0000000040)=@canfd={{0x2, 0x0, 0x1}, 0x3e, 0x2, 0x0, 0x0, "67e71463a8a7ee0f7dc99d71cff8f9458011f1a159d2e33e1af87f631e745250b521b4e7cf7cbfa95f25ba9dffb30dfa5ecf8c3a2b1998c45720f58f333d0ea8"}, 0x48}, 0x1, 0x0, 0x0, 0x44085}, 0x22000080) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x709000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x3000000, 0x40010, r2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0xfffffffffffffffe) prlimit64(r0, 0x9, &(0x7f0000000200)={0xffffffffffffffd1, 0x1}, &(0x7f0000000240)) 20:24:50 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x4) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:50 executing program 5: r0 = getpgid(0x0) (async) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) (async) getpgrp(r0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x111, 0x5}}, 0x20) (async) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={&(0x7f0000000040)=@canfd={{0x2, 0x0, 0x1}, 0x3e, 0x2, 0x0, 0x0, "67e71463a8a7ee0f7dc99d71cff8f9458011f1a159d2e33e1af87f631e745250b521b4e7cf7cbfa95f25ba9dffb30dfa5ecf8c3a2b1998c45720f58f333d0ea8"}, 0x48}, 0x1, 0x0, 0x0, 0x44085}, 0x22000080) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x709000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x3000000, 0x40010, r2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0xfffffffffffffffe) (async, rerun: 32) prlimit64(r0, 0x9, &(0x7f0000000200)={0xffffffffffffffd1, 0x1}, &(0x7f0000000240)) (rerun: 32) 20:24:50 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x4) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:50 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async, rerun: 32) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000900000000000800090000000000"], 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4000800) (async, rerun: 64) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x3) (async, rerun: 64) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000000)) 20:24:50 executing program 0: syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x19, 0xa, 'ns/time_for_children\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4040) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) (async) ioctl$PPPIOCDISCONN(r3, 0x7439) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r4, 0x7439) (async) ioctl$PPPIOCDISCONN(r4, 0x7439) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="10002dbd7000ffdbdf25020000003400078008000100862e177277ff2f37c7dab80b165f0f77a7e22a152b792af55f563c79c3eeaf9d1e9d3722fd8eba638a982c6c81c2c4897ba1e9c85b7b3d4fbcebc532738cae174f05", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100000000000c0006000200000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r5, 0x600, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x24000001) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00') 20:24:50 executing program 2: r0 = getpgid(0x0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/user\x00') 20:24:50 executing program 5: r0 = getpgid(0x0) (async) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) getpgrp(r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x111, 0x5}}, 0x20) (async, rerun: 64) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={&(0x7f0000000040)=@canfd={{0x2, 0x0, 0x1}, 0x3e, 0x2, 0x0, 0x0, "67e71463a8a7ee0f7dc99d71cff8f9458011f1a159d2e33e1af87f631e745250b521b4e7cf7cbfa95f25ba9dffb30dfa5ecf8c3a2b1998c45720f58f333d0ea8"}, 0x48}, 0x1, 0x0, 0x0, 0x44085}, 0x22000080) (rerun: 64) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x709000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x3000000, 0x40010, r2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0xfffffffffffffffe) (async) prlimit64(r0, 0x9, &(0x7f0000000200)={0xffffffffffffffd1, 0x1}, &(0x7f0000000240)) 20:24:50 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x4) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10200, 0x0) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x4) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (async) 20:24:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r1, 0x711, 0x70bd2d}, 0x14}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="20002bbd7000fcdbdf250400000014000193c7e307ffb6585c00000000000000000108000300b9000000080002000700000014000100ff0100000000000000000000000000050500050004000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000091) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000007c0)) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000640), &(0x7f0000000680)=0x4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000007c0)=0x3) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x40}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x2e}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1ea9}]}, 0x58}}, 0x800) ioctl$PPPIOCGFLAGS1(r5, 0x8004745a, &(0x7f00000004c0)) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMRU1(r4, 0x40047452, &(0x7f0000000000)=0x25) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000f555d17e4e19bc9c31167868c84f701b221a1dd31d088de2789bfcb420dc7a5b7a92e1b62f7b9c5c36ede52f65a4507a12f4e27534bcb169b8075a68c51e4310d6de691796f0531a66af7c4073a238cc5dec6fb9f1322bfcc8ee15bd07f473fdc57f849f539ab1838663a24fe19b6860c3d635ab2c16380c4bdcf93692f6d54e065bf6", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3f}]}, 0x40}, 0x1, 0x0, 0x0, 0xc048801}, 0x8015) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000040)=0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r7, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x801) 20:24:50 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) 20:24:50 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x4, 0x6, 0x92d7, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0x3}, 0x48) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0xd80, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x59, 0x6, 0xfffffffd, 0x100, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0xa}, 0x48) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r5, 0x7439) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x4, 0x0, 0x8, 0x4, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x8, &(0x7f0000000000)=@raw=[@generic={0x0, 0x2, 0xd, 0xbe2a, 0x9}, @call={0x85, 0x0, 0x0, 0xf}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x0, 0xd, 0x1, 0x4, 0xffffffffffffffff}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}], &(0x7f0000000040)='GPL\x00', 0x7fffffff, 0x87, &(0x7f0000000140)=""/135, 0x40f00, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000000c0)={0x3, 0x7, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r1, r2, r3, 0x1, 0x1, r4, r5, 0x1, r6, 0xffffffffffffffff]}, 0x80) 20:24:50 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe8, 0xe8, 0x4, [@struct={0xd, 0x7, 0x0, 0x4, 0x0, 0x101, [{0x9, 0x4, 0xe4}, {0xd, 0x2, 0x400}, {0xf, 0x3, 0x7298}, {0xf, 0x0, 0x8}, {0xf, 0x1, 0x7}, {0x6, 0x4, 0xffff}, {0x7, 0x2, 0xbb2}]}, @volatile={0x4, 0x0, 0x0, 0x9, 0x2}, @typedef={0x3, 0x0, 0x0, 0x8, 0x4}, @var={0x6, 0x0, 0x0, 0xe, 0x2}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x5e, 0x0, 0x46, 0x6}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x43, 0x0, 0x7b, 0x1}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xa, 0x5}, {0x0, 0x1}, {0x10, 0x5}]}, @volatile={0xb, 0x0, 0x0, 0x9, 0x4}, @var={0xa, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x30, 0x0]}}, &(0x7f0000000180)=""/22, 0x104, 0x16, 0x1}, 0x20) 20:24:50 executing program 0: r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x19, 0xa, 'ns/time_for_children\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4040) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async, rerun: 64) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 64) ioctl$PPPIOCDISCONN(r2, 0x7439) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r4, 0x7439) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="10002dbd7000ffdbdf25020000003400078008000100862e177277ff2f37c7dab80b165f0f77a7e22a152b792af55f563c79c3eeaf9d1e9d3722fd8eba638a982c6c81c2c4897ba1e9c85b7b3d4fbcebc532738cae174f05", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100000000000c0006000200000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r5, 0x600, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x24000001) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00') 20:24:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x44100, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)) 20:24:50 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) 20:24:50 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe8, 0xe8, 0x4, [@struct={0xd, 0x7, 0x0, 0x4, 0x0, 0x101, [{0x9, 0x4, 0xe4}, {0xd, 0x2, 0x400}, {0xf, 0x3, 0x7298}, {0xf, 0x0, 0x8}, {0xf, 0x1, 0x7}, {0x6, 0x4, 0xffff}, {0x7, 0x2, 0xbb2}]}, @volatile={0x4, 0x0, 0x0, 0x9, 0x2}, @typedef={0x3, 0x0, 0x0, 0x8, 0x4}, @var={0x6, 0x0, 0x0, 0xe, 0x2}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x5e, 0x0, 0x46, 0x6}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x43, 0x0, 0x7b, 0x1}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xa, 0x5}, {0x0, 0x1}, {0x10, 0x5}]}, @volatile={0xb, 0x0, 0x0, 0x9, 0x4}, @var={0xa, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x30, 0x0]}}, &(0x7f0000000180)=""/22, 0x104, 0x16, 0x1}, 0x20) 20:24:50 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x4, 0x6, 0x92d7, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0x3}, 0x48) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0xd80, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x59, 0x6, 0xfffffffd, 0x100, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0xa}, 0x48) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r5, 0x7439) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x4, 0x0, 0x8, 0x4, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x8, &(0x7f0000000000)=@raw=[@generic={0x0, 0x2, 0xd, 0xbe2a, 0x9}, @call={0x85, 0x0, 0x0, 0xf}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x0, 0xd, 0x1, 0x4, 0xffffffffffffffff}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}], &(0x7f0000000040)='GPL\x00', 0x7fffffff, 0x87, &(0x7f0000000140)=""/135, 0x40f00, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000000c0)={0x3, 0x7, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r1, r2, r3, 0x1, 0x1, r4, r5, 0x1, r6, 0xffffffffffffffff]}, 0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x4, 0x6, 0x92d7, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0x3}, 0x48) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0xd80, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x59, 0x6, 0xfffffffd, 0x100, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0xa}, 0x48) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r5, 0x7439) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x4, 0x0, 0x8, 0x4, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x8, &(0x7f0000000000)=@raw=[@generic={0x0, 0x2, 0xd, 0xbe2a, 0x9}, @call={0x85, 0x0, 0x0, 0xf}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x0, 0xd, 0x1, 0x4, 0xffffffffffffffff}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}], &(0x7f0000000040)='GPL\x00', 0x7fffffff, 0x87, &(0x7f0000000140)=""/135, 0x40f00, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000000c0)={0x3, 0x7, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r1, r2, r3, 0x1, 0x1, r4, r5, 0x1, r6, 0xffffffffffffffff]}, 0x80) (async) 20:24:50 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20101, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r0, 0x7434) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') 20:24:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x44100, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000040)) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)) 20:24:50 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe8, 0xe8, 0x4, [@struct={0xd, 0x7, 0x0, 0x4, 0x0, 0x101, [{0x9, 0x4, 0xe4}, {0xd, 0x2, 0x400}, {0xf, 0x3, 0x7298}, {0xf, 0x0, 0x8}, {0xf, 0x1, 0x7}, {0x6, 0x4, 0xffff}, {0x7, 0x2, 0xbb2}]}, @volatile={0x4, 0x0, 0x0, 0x9, 0x2}, @typedef={0x3, 0x0, 0x0, 0x8, 0x4}, @var={0x6, 0x0, 0x0, 0xe, 0x2}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x5e, 0x0, 0x46, 0x6}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x43, 0x0, 0x7b, 0x1}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xa, 0x5}, {0x0, 0x1}, {0x10, 0x5}]}, @volatile={0xb, 0x0, 0x0, 0x9, 0x4}, @var={0xa, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x30, 0x0]}}, &(0x7f0000000180)=""/22, 0x104, 0x16, 0x1}, 0x20) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe8, 0xe8, 0x4, [@struct={0xd, 0x7, 0x0, 0x4, 0x0, 0x101, [{0x9, 0x4, 0xe4}, {0xd, 0x2, 0x400}, {0xf, 0x3, 0x7298}, {0xf, 0x0, 0x8}, {0xf, 0x1, 0x7}, {0x6, 0x4, 0xffff}, {0x7, 0x2, 0xbb2}]}, @volatile={0x4, 0x0, 0x0, 0x9, 0x2}, @typedef={0x3, 0x0, 0x0, 0x8, 0x4}, @var={0x6, 0x0, 0x0, 0xe, 0x2}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x5e, 0x0, 0x46, 0x6}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x43, 0x0, 0x7b, 0x1}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xa, 0x5}, {0x0, 0x1}, {0x10, 0x5}]}, @volatile={0xb, 0x0, 0x0, 0x9, 0x4}, @var={0xa, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x30, 0x0]}}, &(0x7f0000000180)=""/22, 0x104, 0x16, 0x1}, 0x20) (async) 20:24:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r1, 0x711, 0x70bd2d}, 0x14}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="20002bbd7000fcdbdf250400000014000193c7e307ffb6585c00000000000000000108000300b9000000080002000700000014000100ff0100000000000000000000000000050500050004000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000091) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000007c0)) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000640), &(0x7f0000000680)=0x4) (async) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000640), &(0x7f0000000680)=0x4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000007c0)=0x3) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x40}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x2e}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1ea9}]}, 0x58}}, 0x800) ioctl$PPPIOCGFLAGS1(r5, 0x8004745a, &(0x7f00000004c0)) (async) ioctl$PPPIOCGFLAGS1(r5, 0x8004745a, &(0x7f00000004c0)) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMRU1(r4, 0x40047452, &(0x7f0000000000)=0x25) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) (async) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000f555d17e4e19bc9c31167868c84f701b221a1dd31d088de2789bfcb420dc7a5b7a92e1b62f7b9c5c36ede52f65a4507a12f4e27534bcb169b8075a68c51e4310d6de691796f0531a66af7c4073a238cc5dec6fb9f1322bfcc8ee15bd07f473fdc57f849f539ab1838663a24fe19b6860c3d635ab2c16380c4bdcf93692f6d54e065bf6", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000f555d17e4e19bc9c31167868c84f701b221a1dd31d088de2789bfcb420dc7a5b7a92e1b62f7b9c5c36ede52f65a4507a12f4e27534bcb169b8075a68c51e4310d6de691796f0531a66af7c4073a238cc5dec6fb9f1322bfcc8ee15bd07f473fdc57f849f539ab1838663a24fe19b6860c3d635ab2c16380c4bdcf93692f6d54e065bf6", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3f}]}, 0x40}, 0x1, 0x0, 0x0, 0xc048801}, 0x8015) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000040)=0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r7, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x801) 20:24:50 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x0) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) (async) 20:24:50 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20101, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r0, 0x7434) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') 20:24:50 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x4, 0x6, 0x92d7, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0x3}, 0x48) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0xd80, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x59, 0x6, 0xfffffffd, 0x100, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0xa}, 0x48) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r5, 0x7439) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x4, 0x0, 0x8, 0x4, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x8, &(0x7f0000000000)=@raw=[@generic={0x0, 0x2, 0xd, 0xbe2a, 0x9}, @call={0x85, 0x0, 0x0, 0xf}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x0, 0xd, 0x1, 0x4, 0xffffffffffffffff}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}], &(0x7f0000000040)='GPL\x00', 0x7fffffff, 0x87, &(0x7f0000000140)=""/135, 0x40f00, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000000c0)={0x3, 0x7, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r1, r2, r3, 0x1, 0x1, r4, r5, 0x1, r6, 0xffffffffffffffff]}, 0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x4, 0x6, 0x92d7, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0x3}, 0x48) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0xd80, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x59, 0x6, 0xfffffffd, 0x100, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0xa}, 0x48) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r5, 0x7439) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x4, 0x0, 0x8, 0x4, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x8, &(0x7f0000000000)=@raw=[@generic={0x0, 0x2, 0xd, 0xbe2a, 0x9}, @call={0x85, 0x0, 0x0, 0xf}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x0, 0xd, 0x1, 0x4, 0xffffffffffffffff}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}], &(0x7f0000000040)='GPL\x00', 0x7fffffff, 0x87, &(0x7f0000000140)=""/135, 0x40f00, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000000c0)={0x3, 0x7, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r1, r2, r3, 0x1, 0x1, r4, r5, 0x1, r6, 0xffffffffffffffff]}, 0x80) (async) 20:24:50 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x189800, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/time\x00') sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x54}}, 0x0) 20:24:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x44100, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000040)) (async, rerun: 32) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)) (rerun: 32) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)) 20:24:50 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20101, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r0, 0x7434) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20101, 0x0) (async) ioctl$PPPIOCUNBRIDGECHAN(r0, 0x7434) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') (async) 20:24:50 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x189800, 0x0) (async) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/time\x00') sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x54}}, 0x0) 20:24:50 executing program 2: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000000)=0x1000, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') 20:24:50 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x2404001c}, 0x24004000) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000080)=""/9) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000840), 0x64c40, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14, 0x0, 0x1}, 0x14}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) inotify_init() 20:24:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async, rerun: 64) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r1, 0x711, 0x70bd2d}, 0x14}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) (async, rerun: 64) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="20002bbd7000fcdbdf250400000014000193c7e307ffb6585c00000000000000000108000300b9000000080002000700000014000100ff0100000000000000000000000000050500050004000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000091) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000007c0)) (async, rerun: 64) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000640), &(0x7f0000000680)=0x4) (async, rerun: 64) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000007c0)=0x3) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x40}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x2e}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1ea9}]}, 0x58}}, 0x800) ioctl$PPPIOCGFLAGS1(r5, 0x8004745a, &(0x7f00000004c0)) (async) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMRU1(r4, 0x40047452, &(0x7f0000000000)=0x25) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000f555d17e4e19bc9c31167868c84f701b221a1dd31d088de2789bfcb420dc7a5b7a92e1b62f7b9c5c36ede52f65a4507a12f4e27534bcb169b8075a68c51e4310d6de691796f0531a66af7c4073a238cc5dec6fb9f1322bfcc8ee15bd07f473fdc57f849f539ab1838663a24fe19b6860c3d635ab2c16380c4bdcf93692f6d54e065bf6", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3f}]}, 0x40}, 0x1, 0x0, 0x0, 0xc048801}, 0x8015) (async) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000040)=0x1) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r7, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x801) 20:24:50 executing program 2: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000000)=0x1000, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') 20:24:51 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_I_TEI={0x8, 0x8, 0x7fff}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x880) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1409, 0x800, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000081}, 0x40000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fanotify_init(0x20, 0x101000) ioctl$PPPIOCDISCONN(r3, 0x7439) ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f0000000040)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x100, 0x1403, 0x13, 0x70bd27, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nicvf0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x20014c00}, 0x48080) 20:24:51 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x189800, 0x0) (async) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/time\x00') sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x54}}, 0x0) 20:24:51 executing program 3: socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="00ff01bd7000fcdb00"], 0x14}, 0x1, 0x0, 0x0, 0x2404c801}, 0x40080) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) 20:24:51 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x2404001c}, 0x24004000) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000080)=""/9) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000840), 0x64c40, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14, 0x0, 0x1}, 0x14}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) inotify_init() (async) inotify_init() 20:24:51 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_I_TEI={0x8, 0x8, 0x7fff}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x880) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1409, 0x800, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000081}, 0x40000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) fanotify_init(0x20, 0x101000) ioctl$PPPIOCDISCONN(r3, 0x7439) ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f0000000040)) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x100, 0x1403, 0x13, 0x70bd27, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nicvf0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x20014c00}, 0x48080) 20:24:51 executing program 2: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000000)=0x1000, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') 20:24:51 executing program 4: ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000000)=0x3) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0xa00, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x4802, 0x0) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f00000000c0)) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)=0x1) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x140b, 0x400, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:51 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000000)={0x1000, 0x7fffffff, {r1}, {}, 0x0, 0x5}) 20:24:51 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x2404001c}, 0x24004000) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000080)=""/9) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000840), 0x64c40, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) inotify_init() 20:24:51 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_I_TEI={0x8, 0x8, 0x7fff}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x880) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1409, 0x800, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000081}, 0x40000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fanotify_init(0x20, 0x101000) ioctl$PPPIOCDISCONN(r3, 0x7439) ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f0000000040)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x100, 0x1403, 0x13, 0x70bd27, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nicvf0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x20014c00}, 0x48080) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) (async) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_I_TEI={0x8, 0x8, 0x7fff}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x880) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1409, 0x800, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000081}, 0x40000) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) fanotify_init(0x20, 0x101000) (async) ioctl$PPPIOCDISCONN(r3, 0x7439) (async) ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f0000000040)) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x100, 0x1403, 0x13, 0x70bd27, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nicvf0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x20014c00}, 0x48080) (async) 20:24:51 executing program 3: socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="00ff01bd7000fcdb00"], 0x14}, 0x1, 0x0, 0x0, 0x2404c801}, 0x40080) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) socket$nl_rdma(0x10, 0x3, 0x14) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="00ff01bd7000fcdb00"], 0x14}, 0x1, 0x0, 0x0, 0x2404c801}, 0x40080) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) 20:24:51 executing program 2: mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs\x00', 0x1ff) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x50, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x6}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040081}, 0x4080) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:51 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) (async, rerun: 32) r1 = getpgid(0x0) (rerun: 32) sched_rr_get_interval(r1, &(0x7f0000000ac0)) (async) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000000)={0x1000, 0x7fffffff, {r1}, {}, 0x0, 0x5}) 20:24:51 executing program 4: ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000000)=0x3) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0xa00, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x4802, 0x0) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f00000000c0)) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)=0x1) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x140b, 0x400, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000000)=0x3) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0xa00, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x4802, 0x0) (async) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f00000000c0)) (async) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)=0x1) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x140b, 0x400, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) 20:24:51 executing program 2: mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs\x00', 0x1ff) (async) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x50, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x6}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040081}, 0x4080) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:51 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) (async, rerun: 64) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000000)={0x1000, 0x7fffffff, {r1}, {}, 0x0, 0x5}) (rerun: 64) 20:24:51 executing program 2: mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs\x00', 0x1ff) (async) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x50, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x6}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040081}, 0x4080) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:51 executing program 3: socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="00ff01bd7000fcdb00"], 0x14}, 0x1, 0x0, 0x0, 0x2404c801}, 0x40080) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) socket$nl_rdma(0x10, 0x3, 0x14) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="00ff01bd7000fcdb00"], 0x14}, 0x1, 0x0, 0x0, 0x2404c801}, 0x40080) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) 20:24:51 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x44, 0x1407, 0x300, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) 20:24:51 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1409, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x80000}, 0x814) 20:24:51 executing program 4: ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000007c0)) (async, rerun: 64) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000000)=0x3) (async, rerun: 64) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0xa00, 0x0) (async, rerun: 64) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x4802, 0x0) (rerun: 64) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f00000000c0)) (async) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)=0x1) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x140b, 0x400, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:51 executing program 5: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/user\x00') getpgid(r0) 20:24:51 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async, rerun: 64) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') (rerun: 64) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x44, 0x1407, 0x300, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) 20:24:51 executing program 2: getgid() syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r1) getgid() ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x111}}, 0x20) 20:24:51 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1409, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x80000}, 0x814) 20:24:51 executing program 5: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/user\x00') (async) getpgid(r0) 20:24:51 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000000)=0x2) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:51 executing program 2: getgid() syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async, rerun: 32) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 32) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r1) getgid() (async, rerun: 32) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f00000000c0)) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x111}}, 0x20) 20:24:51 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1409, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x80000}, 0x814) 20:24:51 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x418002, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x10a, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4001) 20:24:51 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x44, 0x1407, 0x300, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x44, 0x1407, 0x300, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) (async) 20:24:51 executing program 5: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/user\x00') getpgid(r0) 20:24:51 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0xe6a000, 0x43564548, 0x2, 0x6, 0x3, @discrete={0x8, 0x2}}) 20:24:51 executing program 1: sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="460000000214010025bd7000fcdbdf250900020073797a31000000010504010000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000804) r0 = getpgid(0x0) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) getpgid(r1) sched_rr_get_interval(r0, &(0x7f0000000ac0)) r2 = getpgid(0x0) sched_rr_get_interval(r2, &(0x7f0000000ac0)) r3 = getpgrp(r0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/ipc\x00') 20:24:51 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000000)=0x2) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:51 executing program 5: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000000)) nanosleep(&(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/ipc\x00') getpgid(0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000071400042abd7000fedbdf3908000100010000000500540000000000080001000200000005005400060000000900020073797a32000000000800010002000000050054000000020008000100010000006199973c17aefaa0c3c7259dff38cfb64ee220c9a13f9e67a1aa4c1499c405dd291918d647fd20a43cf20000019c1c97551c35f087db18997a30a329584f0758f1c2c9e6"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x894) fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, 0x0}) sched_rr_get_interval(r0, &(0x7f0000000040)) getpgid(r2) r3 = getpgid(0x0) sched_rr_get_interval(r3, &(0x7f0000000ac0)) getresuid(&(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000300)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0x9, 0x9, {r3}, {r4}, 0x1c00000, 0x6}) 20:24:51 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x418002, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x10a, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4001) 20:24:51 executing program 2: getgid() syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r1) getgid() ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x111}}, 0x20) getgid() (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r1) (async) getgid() (async) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f00000000c0)) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x111}}, 0x20) (async) 20:24:51 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0xe6a000, 0x43564548, 0x2, 0x6, 0x3, @discrete={0x8, 0x2}}) 20:24:51 executing program 1: sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="460000000214010025bd7000fcdbdf250900020073797a31000000010504010000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000804) (async) r0 = getpgid(0x0) (async) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) getpgid(r1) (async) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) r2 = getpgid(0x0) sched_rr_get_interval(r2, &(0x7f0000000ac0)) r3 = getpgrp(r0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/ipc\x00') 20:24:51 executing program 5: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000000)) nanosleep(&(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/ipc\x00') getpgid(0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000071400042abd7000fedbdf3908000100010000000500540000000000080001000200000005005400060000000900020073797a32000000000800010002000000050054000000020008000100010000006199973c17aefaa0c3c7259dff38cfb64ee220c9a13f9e67a1aa4c1499c405dd291918d647fd20a43cf20000019c1c97551c35f087db18997a30a329584f0758f1c2c9e6"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x894) fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, 0x0}) sched_rr_get_interval(r0, &(0x7f0000000040)) getpgid(r2) r3 = getpgid(0x0) sched_rr_get_interval(r3, &(0x7f0000000ac0)) getresuid(&(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000300)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0x9, 0x9, {r3}, {r4}, 0x1c00000, 0x6}) getpgid(0x0) (async) sched_rr_get_interval(r0, &(0x7f0000000000)) (async) nanosleep(&(0x7f0000000080), &(0x7f00000000c0)) (async) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/ipc\x00') (async) getpgid(0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000071400042abd7000fedbdf3908000100010000000500540000000000080001000200000005005400060000000900020073797a32000000000800010002000000050054000000020008000100010000006199973c17aefaa0c3c7259dff38cfb64ee220c9a13f9e67a1aa4c1499c405dd291918d647fd20a43cf20000019c1c97551c35f087db18997a30a329584f0758f1c2c9e6"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x894) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000380)) (async) sched_rr_get_interval(r0, &(0x7f0000000040)) (async) getpgid(r2) (async) getpgid(0x0) (async) sched_rr_get_interval(r3, &(0x7f0000000ac0)) (async) getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0x9, 0x9, {r3}, {r4}, 0x1c00000, 0x6}) (async) 20:24:51 executing program 2: getgid() syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x1402, 0x4, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000010) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) 20:24:51 executing program 2: getgid() (async, rerun: 64) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') (rerun: 64) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async, rerun: 32) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 32) ioctl$PPPIOCDISCONN(r2, 0x7439) (async) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x1402, 0x4, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000010) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) 20:24:51 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x418002, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x10a, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4001) 20:24:51 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0xe6a000, 0x43564548, 0x2, 0x6, 0x3, @discrete={0x8, 0x2}}) 20:24:51 executing program 5: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000000)) (async) nanosleep(&(0x7f0000000080), &(0x7f00000000c0)) (async) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/ipc\x00') getpgid(0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000071400042abd7000fedbdf3908000100010000000500540000000000080001000200000005005400060000000900020073797a32000000000800010002000000050054000000020008000100010000006199973c17aefaa0c3c7259dff38cfb64ee220c9a13f9e67a1aa4c1499c405dd291918d647fd20a43cf20000019c1c97551c35f087db18997a30a329584f0758f1c2c9e6"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x894) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, 0x0}) sched_rr_get_interval(r0, &(0x7f0000000040)) (async, rerun: 64) getpgid(r2) (async, rerun: 64) r3 = getpgid(0x0) sched_rr_get_interval(r3, &(0x7f0000000ac0)) (async) getresuid(&(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000300)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0x9, 0x9, {r3}, {r4}, 0x1c00000, 0x6}) 20:24:51 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000000)=0x2) (async) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000000)=0x2) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:51 executing program 1: sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="460000000214010025bd7000fcdbdf250900020073797a31000000010504010000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000804) (async) r0 = getpgid(0x0) (async) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) (async) getpgid(r1) (async) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) r2 = getpgid(0x0) sched_rr_get_interval(r2, &(0x7f0000000ac0)) r3 = getpgrp(r0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/ipc\x00') 20:24:51 executing program 2: getgid() syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') socket$nl_rdma(0x10, 0x3, 0x14) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) ioctl$PPPIOCDISCONN(r1, 0x7439) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x1402, 0x4, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000010) (async) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x1402, 0x4, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000010) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) 20:24:51 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x700, 0x275e21d6cf1739ac, 0x200, 0x7, {{0xa, 0x4, 0x3, 0x0, 0x28, 0x65, 0x0, 0x8, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @local, {[@end, @generic={0x86, 0x10, "c5be369e8a7e7edf356f09d8550c"}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x2, 0x1, 0x1, 0x8, 0x7, 0x20, 0xfffffffffffffffd}]}, &(0x7f0000000080)='GPL\x00', 0x40, 0x67, &(0x7f00000000c0)=""/103, 0x41100, 0xd, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xa, 0x0, 0x4}, 0x10}, 0x80) 20:24:51 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/uts\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x1407, 0x1, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r1, 0x711}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x40004) 20:24:51 executing program 5: ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400400, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x2c}}, 0x8080) 20:24:51 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), 0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:51 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x2006805) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:51 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x700, 0x275e21d6cf1739ac, 0x200, 0x7, {{0xa, 0x4, 0x3, 0x0, 0x28, 0x65, 0x0, 0x8, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @local, {[@end, @generic={0x86, 0x10, "c5be369e8a7e7edf356f09d8550c"}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x2, 0x1, 0x1, 0x8, 0x7, 0x20, 0xfffffffffffffffd}]}, &(0x7f0000000080)='GPL\x00', 0x40, 0x67, &(0x7f00000000c0)=""/103, 0x41100, 0xd, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xa, 0x0, 0x4}, 0x10}, 0x80) 20:24:51 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) ioctl$PPPIOCGIDLE32(0xffffffffffffffff, 0x8008743f, &(0x7f0000000000)) 20:24:51 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/uts\x00') (async) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/uts\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x1407, 0x1, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r1, 0x711}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x40004) 20:24:51 executing program 5: ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400400, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x2c}}, 0x8080) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000000)) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400400, 0x0) (async) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x2c}}, 0x8080) (async) 20:24:51 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), 0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:51 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x700, 0x275e21d6cf1739ac, 0x200, 0x7, {{0xa, 0x4, 0x3, 0x0, 0x28, 0x65, 0x0, 0x8, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @local, {[@end, @generic={0x86, 0x10, "c5be369e8a7e7edf356f09d8550c"}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x2, 0x1, 0x1, 0x8, 0x7, 0x20, 0xfffffffffffffffd}]}, &(0x7f0000000080)='GPL\x00', 0x40, 0x67, &(0x7f00000000c0)=""/103, 0x41100, 0xd, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xa, 0x0, 0x4}, 0x10}, 0x80) 20:24:52 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/uts\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x1407, 0x1, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x1407, 0x1, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r1, 0x711}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x40004) 20:24:52 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x2006805) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x2006805) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (async) 20:24:52 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), 0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), 0x4) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) 20:24:52 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') 20:24:52 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async, rerun: 64) ioctl$PPPIOCGIDLE32(0xffffffffffffffff, 0x8008743f, &(0x7f0000000000)) (rerun: 64) 20:24:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040801}, 0x4002094) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xbf}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x44054) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x1402, 0x4, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x40) 20:24:52 executing program 5: ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400400, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x2c}}, 0x8080) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000000)) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400400, 0x0) (async) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x2c}}, 0x8080) (async) 20:24:52 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x1402, 0x200, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0xa6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 20:24:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040801}, 0x4002094) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xbf}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x44054) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x1402, 0x4, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x40) 20:24:52 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x2006805) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:52 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x1402, 0x200, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0xa6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x1402, 0x200, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0xa6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) 20:24:52 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') 20:24:52 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) ioctl$PPPIOCGIDLE32(0xffffffffffffffff, 0x8008743f, &(0x7f0000000000)) 20:24:52 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') 20:24:52 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') 20:24:52 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x1402, 0x200, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0xa6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x1402, 0x200, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0xa6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) 20:24:52 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = accept4$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x0) accept$phonet_pipe(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') 20:24:52 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) r1 = fanotify_init(0x4, 0x101000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) fanotify_mark(r1, 0x8, 0x40001030, r2, &(0x7f0000000000)='./file0\x00') ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040801}, 0x4002094) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xbf}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x44054) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x1402, 0x4, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x40) 20:24:52 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') 20:24:52 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x40000) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x1000000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000080)={0x7fffffff, 0x180000}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') 20:24:52 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = accept4$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x0) accept$phonet_pipe(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') 20:24:52 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') 20:24:52 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = accept4$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x0) accept$phonet_pipe(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') 20:24:52 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x40) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:52 executing program 5: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/user\x00') 20:24:52 executing program 0: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="618f975a", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0x7, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4040099}, 0x880c) 20:24:52 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) r1 = fanotify_init(0x4, 0x101000) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) fanotify_mark(r1, 0x8, 0x40001030, r2, &(0x7f0000000000)='./file0\x00') (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:52 executing program 5: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/user\x00') 20:24:52 executing program 0: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="618f975a", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0x7, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4040099}, 0x880c) 20:24:52 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x40000) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x1000000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000080)={0x7fffffff, 0x180000}) (async) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000080)={0x7fffffff, 0x180000}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') 20:24:52 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000080)={0x8000, 0x8369}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00022cbd7000fedbdf25010000000600060004000000080002000000000008000100", @ANYRES32=0x0, @ANYBLOB="b56df7c30000000000000004f4a8e65ad9384b00ac7e30b9d8eb703011543faee373e7c1acda9a0425cff284d85b9703e6929b087f7f3ec5547d006f16722dd2c62b933e2d7c7ed85830f18b914302144f94a3f00b0d6e0f275e9f41248edcedba9de3ea9f550cfd5c5a768b350ecd6f8c209ed5b3314325a201aca6dee0569d3e05b11103fd792963d73218b99612b6"], 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000840) 20:24:52 executing program 5: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/user\x00') 20:24:52 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) r1 = fanotify_init(0x4, 0x101000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) (async, rerun: 32) fanotify_mark(r1, 0x8, 0x40001030, r2, &(0x7f0000000000)='./file0\x00') (async, rerun: 32) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:52 executing program 0: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="618f975a", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0x7, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4040099}, 0x880c) 20:24:52 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000080)={0x8000, 0x8369}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00022cbd7000fedbdf25010000000600060004000000080002000000000008000100", @ANYRES32=0x0, @ANYBLOB="b56df7c30000000000000004f4a8e65ad9384b00ac7e30b9d8eb703011543faee373e7c1acda9a0425cff284d85b9703e6929b087f7f3ec5547d006f16722dd2c62b933e2d7c7ed85830f18b914302144f94a3f00b0d6e0f275e9f41248edcedba9de3ea9f550cfd5c5a768b350ecd6f8c209ed5b3314325a201aca6dee0569d3e05b11103fd792963d73218b99612b6"], 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000840) 20:24:52 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x40) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x40) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:52 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macsec0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040040}, 0x800) 20:24:52 executing program 0: syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) 20:24:52 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000080)={0x8000, 0x8369}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00022cbd7000fedbdf25010000000600060004000000080002000000000008000100", @ANYRES32=0x0, @ANYBLOB="b56df7c30000000000000004f4a8e65ad9384b00ac7e30b9d8eb703011543faee373e7c1acda9a0425cff284d85b9703e6929b087f7f3ec5547d006f16722dd2c62b933e2d7c7ed85830f18b914302144f94a3f00b0d6e0f275e9f41248edcedba9de3ea9f550cfd5c5a768b350ecd6f8c209ed5b3314325a201aca6dee0569d3e05b11103fd792963d73218b99612b6"], 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000840) 20:24:52 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x40000) (async, rerun: 64) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x1000000) (async, rerun: 64) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000080)={0x7fffffff, 0x180000}) (async, rerun: 32) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') (rerun: 32) 20:24:52 executing program 0: syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async) 20:24:52 executing program 2: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/pid\x00') 20:24:52 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000000)={0x5095cf03}) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:52 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macsec0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040040}, 0x800) 20:24:52 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x40) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:52 executing program 2: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/pid\x00') 20:24:52 executing program 0: syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) 20:24:52 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macsec0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040040}, 0x800) 20:24:52 executing program 2: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/pid\x00') 20:24:52 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x311800, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) 20:24:52 executing program 0: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/uts\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 20:24:52 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:52 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x400, 0x3, {}, {0xffffffffffffffff}, 0xff, 0x8}) r0 = getpgid(0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='afs_folio_dirty\x00', r1}, 0x10) r2 = getpgid(0x0) sched_rr_get_interval(r2, &(0x7f0000000ac0)) getpgrp(r2) sched_rr_get_interval(r0, &(0x7f0000000ac0)) accept$phonet_pipe(r1, &(0x7f0000000140), &(0x7f00000001c0)=0x10) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/cgroup\x00') 20:24:52 executing program 0: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/uts\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 20:24:52 executing program 5: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') 20:24:52 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000000)={0x5095cf03}) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:52 executing program 5: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) sched_rr_get_interval(r0, &(0x7f0000000ac0)) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') 20:24:52 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x311800, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x311800, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) (async) 20:24:52 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x400, 0x3, {}, {0xffffffffffffffff}, 0xff, 0x8}) r0 = getpgid(0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='afs_folio_dirty\x00', r1}, 0x10) r2 = getpgid(0x0) sched_rr_get_interval(r2, &(0x7f0000000ac0)) getpgrp(r2) sched_rr_get_interval(r0, &(0x7f0000000ac0)) accept$phonet_pipe(r1, &(0x7f0000000140), &(0x7f00000001c0)=0x10) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/cgroup\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x400, 0x3, {}, {0xffffffffffffffff}, 0xff, 0x8}) (async) getpgid(0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='afs_folio_dirty\x00', r1}, 0x10) (async) getpgid(0x0) (async) sched_rr_get_interval(r2, &(0x7f0000000ac0)) (async) getpgrp(r2) (async) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) accept$phonet_pipe(r1, &(0x7f0000000140), &(0x7f00000001c0)=0x10) (async) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/cgroup\x00') (async) 20:24:52 executing program 0: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) (async) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/uts\x00') (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 20:24:52 executing program 5: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') (async) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') 20:24:52 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:52 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x400, 0x3, {}, {0xffffffffffffffff}, 0xff, 0x8}) r0 = getpgid(0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='afs_folio_dirty\x00', r1}, 0x10) r2 = getpgid(0x0) sched_rr_get_interval(r2, &(0x7f0000000ac0)) getpgrp(r2) sched_rr_get_interval(r0, &(0x7f0000000ac0)) accept$phonet_pipe(r1, &(0x7f0000000140), &(0x7f00000001c0)=0x10) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/cgroup\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x400, 0x3, {}, {0xffffffffffffffff}, 0xff, 0x8}) (async) getpgid(0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='afs_folio_dirty\x00', r1}, 0x10) (async) getpgid(0x0) (async) sched_rr_get_interval(r2, &(0x7f0000000ac0)) (async) getpgrp(r2) (async) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) accept$phonet_pipe(r1, &(0x7f0000000140), &(0x7f00000001c0)=0x10) (async) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/cgroup\x00') (async) 20:24:52 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:52 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x311800, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x311800, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) (async) 20:24:52 executing program 0: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000040)) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/cgroup\x00') 20:24:52 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/user\x00') ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64) 20:24:52 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000000)={0x5095cf03}) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:52 executing program 1: r0 = inotify_init1(0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xa000010}, 0x0) 20:24:52 executing program 0: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000040)) (async) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/cgroup\x00') 20:24:52 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/user\x00') ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64) (async) ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64) 20:24:52 executing program 0: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000040)) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/cgroup\x00') 20:24:53 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') write$nbd(0xffffffffffffffff, &(0x7f0000000380)={0x67446698, 0x1, 0x0, 0x3, 0x3, "d3750ddaf01b4b6543c72d79a32d4396f3e0ed1a6663a0f4f7ad57ad5e2cac7010638876561eaaefb60456289b60f297ef75f50071733f9c8918b9eb93f2415d7841070cde2811b6a2a1342115002ff6e7a63554d8d73e74a0c5195439d4a79221fe8c2e3f09766fb068956969f92f480f47c529513b4174"}, 0x88) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00H\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf2500000000080005000a0101020800090000000000080008000000000008000700", @ANYRES32=r1, @ANYBLOB="09000100", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc081) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r4, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0xc001) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="460015003e6ea16438c6b3ea8be6e4259f1fa01972476fa675ec73081464dd227bc3d2e6bf2709e1fe", @ANYRES16=r5, @ANYBLOB="71092abd7000fcdbdf2502000000080009000000000008000500ffffffff060006000000000008000500e000000108000800020000000800020001000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x40048d1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000a40)=ANY=[@ANYBLOB='sit0\x00'/16, @ANYRES32=r2, @ANYBLOB="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"]}) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x2, &(0x7f0000000440)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000480)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x15, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x3, 0x6, 0x7fffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x1]}, 0x80) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) 20:24:53 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/user\x00') ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/user\x00') (async) ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64) (async) 20:24:53 executing program 1: r0 = inotify_init1(0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) (async) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xa000010}, 0x0) 20:24:53 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000080)=0x100888) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:53 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async, rerun: 32) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') (async, rerun: 32) write$nbd(0xffffffffffffffff, &(0x7f0000000380)={0x67446698, 0x1, 0x0, 0x3, 0x3, "d3750ddaf01b4b6543c72d79a32d4396f3e0ed1a6663a0f4f7ad57ad5e2cac7010638876561eaaefb60456289b60f297ef75f50071733f9c8918b9eb93f2415d7841070cde2811b6a2a1342115002ff6e7a63554d8d73e74a0c5195439d4a79221fe8c2e3f09766fb068956969f92f480f47c529513b4174"}, 0x88) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00H\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf2500000000080005000a0101020800090000000000080008000000000008000700", @ANYRES32=r1, @ANYBLOB="09000100", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc081) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r4, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0xc001) (async) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="460015003e6ea16438c6b3ea8be6e4259f1fa01972476fa675ec73081464dd227bc3d2e6bf2709e1fe", @ANYRES16=r5, @ANYBLOB="71092abd7000fcdbdf2502000000080009000000000008000500ffffffff060006000000000008000500e000000108000800020000000800020001000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x40048d1) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000a40)=ANY=[@ANYBLOB='sit0\x00'/16, @ANYRES32=r2, @ANYBLOB="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"]}) (async, rerun: 64) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x2, &(0x7f0000000440)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000480)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x15, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x3, 0x6, 0x7fffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x1]}, 0x80) (async) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) 20:24:53 executing program 0: ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000040)=0x6) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') 20:24:53 executing program 1: r0 = inotify_init1(0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) (async) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xa000010}, 0x0) 20:24:53 executing program 3: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x7, 0x8, 0x800, 0x7, {{0x22, 0x4, 0x3, 0x15, 0x88, 0x67, 0x0, 0x81, 0x2b, 0x0, @rand_addr=0x64010100, @empty, {[@timestamp={0x44, 0x20, 0x3b, 0x0, 0x6, [0x10000, 0x7fff, 0x0, 0x6, 0x6, 0xffffffff, 0x6]}, @end, @cipso={0x86, 0x3a, 0x2, [{0x2, 0x8, "f0979fbae5e2"}, {0x0, 0x6, "0587dcdb"}, {0x6, 0x9, "47dfdb3d1131be"}, {0x7, 0xb, "de5c3e4abf09d8d215"}, {0x7, 0x12, "996cd6aca210de7b6b898b31d112ca07"}]}, @timestamp_prespec={0x44, 0x14, 0x98, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x3}, {@loopback, 0x101}]}, @end, @noop, @end]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, r0, 0x25, 0x1}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)) 20:24:53 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x1402, 0x300, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4401) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x18, 0x140e, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x2000001}, 0x40001) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x1401, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}}, 0x20004094) 20:24:53 executing program 0: ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000040)=0x6) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') 20:24:53 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') write$nbd(0xffffffffffffffff, &(0x7f0000000380)={0x67446698, 0x1, 0x0, 0x3, 0x3, "d3750ddaf01b4b6543c72d79a32d4396f3e0ed1a6663a0f4f7ad57ad5e2cac7010638876561eaaefb60456289b60f297ef75f50071733f9c8918b9eb93f2415d7841070cde2811b6a2a1342115002ff6e7a63554d8d73e74a0c5195439d4a79221fe8c2e3f09766fb068956969f92f480f47c529513b4174"}, 0x88) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00H\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf2500000000080005000a0101020800090000000000080008000000000008000700", @ANYRES32=r1, @ANYBLOB="09000100", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc081) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r4, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0xc001) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="460015003e6ea16438c6b3ea8be6e4259f1fa01972476fa675ec73081464dd227bc3d2e6bf2709e1fe", @ANYRES16=r5, @ANYBLOB="71092abd7000fcdbdf2502000000080009000000000008000500ffffffff060006000000000008000500e000000108000800020000000800020001000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x40048d1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000a40)=ANY=[@ANYBLOB='sit0\x00'/16, @ANYRES32=r2, @ANYBLOB="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"]}) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x2, &(0x7f0000000440)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000480)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x15, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x3, 0x6, 0x7fffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x1]}, 0x80) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') (async) write$nbd(0xffffffffffffffff, &(0x7f0000000380)={0x67446698, 0x1, 0x0, 0x3, 0x3, "d3750ddaf01b4b6543c72d79a32d4396f3e0ed1a6663a0f4f7ad57ad5e2cac7010638876561eaaefb60456289b60f297ef75f50071733f9c8918b9eb93f2415d7841070cde2811b6a2a1342115002ff6e7a63554d8d73e74a0c5195439d4a79221fe8c2e3f09766fb068956969f92f480f47c529513b4174"}, 0x88) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) (async) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00H\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf2500000000080005000a0101020800090000000000080008000000000008000700", @ANYRES32=r1, @ANYBLOB="09000100", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc081) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), r0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r4, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0xc001) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="460015003e6ea16438c6b3ea8be6e4259f1fa01972476fa675ec73081464dd227bc3d2e6bf2709e1fe", @ANYRES16=r5, @ANYBLOB="71092abd7000fcdbdf2502000000080009000000000008000500ffffffff060006000000000008000500e000000108000800020000000800020001000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x40048d1) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000a40)=ANY=[@ANYBLOB='sit0\x00'/16, @ANYRES32=r2, @ANYBLOB="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"]}) (async) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x2, &(0x7f0000000440)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000480)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x15, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x3, 0x6, 0x7fffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x1]}, 0x80) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) (async) 20:24:53 executing program 1: sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000e84e8e4eb97aa1ebe694be5890eb93b56c7c31f7e39b5243b9750346e29dce3726626f6efba0493e6843349dc1cbe50a9333a3ec741924567a9d6f5d05d427386b34f7", @ANYRES16=0x0, @ANYBLOB="200025bd7000ffdbdf250000000005000d0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x4442, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fbdbdf250200bbbbae330400020000000500040002000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x41) 20:24:53 executing program 0: ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000040)=0x6) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000040)=0x6) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) 20:24:53 executing program 3: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x7, 0x8, 0x800, 0x7, {{0x22, 0x4, 0x3, 0x15, 0x88, 0x67, 0x0, 0x81, 0x2b, 0x0, @rand_addr=0x64010100, @empty, {[@timestamp={0x44, 0x20, 0x3b, 0x0, 0x6, [0x10000, 0x7fff, 0x0, 0x6, 0x6, 0xffffffff, 0x6]}, @end, @cipso={0x86, 0x3a, 0x2, [{0x2, 0x8, "f0979fbae5e2"}, {0x0, 0x6, "0587dcdb"}, {0x6, 0x9, "47dfdb3d1131be"}, {0x7, 0xb, "de5c3e4abf09d8d215"}, {0x7, 0x12, "996cd6aca210de7b6b898b31d112ca07"}]}, @timestamp_prespec={0x44, 0x14, 0x98, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x3}, {@loopback, 0x101}]}, @end, @noop, @end]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, r0, 0x25, 0x1}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x7, 0x8, 0x800, 0x7, {{0x22, 0x4, 0x3, 0x15, 0x88, 0x67, 0x0, 0x81, 0x2b, 0x0, @rand_addr=0x64010100, @empty, {[@timestamp={0x44, 0x20, 0x3b, 0x0, 0x6, [0x10000, 0x7fff, 0x0, 0x6, 0x6, 0xffffffff, 0x6]}, @end, @cipso={0x86, 0x3a, 0x2, [{0x2, 0x8, "f0979fbae5e2"}, {0x0, 0x6, "0587dcdb"}, {0x6, 0x9, "47dfdb3d1131be"}, {0x7, 0xb, "de5c3e4abf09d8d215"}, {0x7, 0x12, "996cd6aca210de7b6b898b31d112ca07"}]}, @timestamp_prespec={0x44, 0x14, 0x98, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x3}, {@loopback, 0x101}]}, @end, @noop, @end]}}}}}) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, r0, 0x25, 0x1}, 0x10) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)) (async) 20:24:53 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x1402, 0x300, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4401) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x18, 0x140e, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x2000001}, 0x40001) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x1401, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}}, 0x20004094) 20:24:53 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000080)=0x100888) (async) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000080)=0x100888) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:53 executing program 1: sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000e84e8e4eb97aa1ebe694be5890eb93b56c7c31f7e39b5243b9750346e29dce3726626f6efba0493e6843349dc1cbe50a9333a3ec741924567a9d6f5d05d427386b34f7", @ANYRES16=0x0, @ANYBLOB="200025bd7000ffdbdf250000000005000d0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x4442, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x4442, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fbdbdf250200bbbbae330400020000000500040002000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x41) 20:24:53 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x1407, 0x400, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040040}, 0x44000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x140e, 0x200, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x851}, 0x10040800) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x1412, 0x20, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x140c, 0x800, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) 20:24:53 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x20, 0x80, 0x5, 0x6, {{0x20, 0x4, 0x0, 0x1, 0x80, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010102, @multicast2, {[@rr={0x7, 0x13, 0xf3, [@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x15}, @multicast2]}, @rr={0x7, 0x7, 0x55, [@local]}, @timestamp_prespec={0x44, 0x24, 0xb9, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0xfffffe01}, {@multicast2, 0x3f}, {@local, 0x91}, {@loopback, 0x3}]}, @end, @timestamp_addr={0x44, 0xc, 0x4f, 0x1, 0x0, [{@local, 0xffff}]}, @timestamp_addr={0x44, 0x1c, 0xc, 0x1, 0x2, [{@remote, 0x20}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x2}, {@loopback, 0x206}]}, @ra={0x94, 0x4}]}}}}}) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0xf343939d6235b2e1, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1b}}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) 20:24:53 executing program 1: sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000e84e8e4eb97aa1ebe694be5890eb93b56c7c31f7e39b5243b9750346e29dce3726626f6efba0493e6843349dc1cbe50a9333a3ec741924567a9d6f5d05d427386b34f7", @ANYRES16=0x0, @ANYBLOB="200025bd7000ffdbdf250000000005000d0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async, rerun: 64) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x4442, 0x0) (rerun: 64) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fbdbdf250200bbbbae330400020000000500040002000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x41) 20:24:53 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x1402, 0x300, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4401) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x18, 0x140e, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x2000001}, 0x40001) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x1401, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}}, 0x20004094) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x1402, 0x300, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4401) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x18, 0x140e, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x2000001}, 0x40001) (async) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x1401, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}}, 0x20004094) (async) 20:24:53 executing program 3: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x7, 0x8, 0x800, 0x7, {{0x22, 0x4, 0x3, 0x15, 0x88, 0x67, 0x0, 0x81, 0x2b, 0x0, @rand_addr=0x64010100, @empty, {[@timestamp={0x44, 0x20, 0x3b, 0x0, 0x6, [0x10000, 0x7fff, 0x0, 0x6, 0x6, 0xffffffff, 0x6]}, @end, @cipso={0x86, 0x3a, 0x2, [{0x2, 0x8, "f0979fbae5e2"}, {0x0, 0x6, "0587dcdb"}, {0x6, 0x9, "47dfdb3d1131be"}, {0x7, 0xb, "de5c3e4abf09d8d215"}, {0x7, 0x12, "996cd6aca210de7b6b898b31d112ca07"}]}, @timestamp_prespec={0x44, 0x14, 0x98, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x3}, {@loopback, 0x101}]}, @end, @noop, @end]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, r0, 0x25, 0x1}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)) 20:24:53 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x1407, 0x400, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040040}, 0x44000) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x140e, 0x200, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x851}, 0x10040800) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x1412, 0x20, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x40004) (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x140c, 0x800, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) (rerun: 64) 20:24:53 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000080)=0x100888) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:53 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') 20:24:53 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x20, 0x80, 0x5, 0x6, {{0x20, 0x4, 0x0, 0x1, 0x80, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010102, @multicast2, {[@rr={0x7, 0x13, 0xf3, [@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x15}, @multicast2]}, @rr={0x7, 0x7, 0x55, [@local]}, @timestamp_prespec={0x44, 0x24, 0xb9, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0xfffffe01}, {@multicast2, 0x3f}, {@local, 0x91}, {@loopback, 0x3}]}, @end, @timestamp_addr={0x44, 0xc, 0x4f, 0x1, 0x0, [{@local, 0xffff}]}, @timestamp_addr={0x44, 0x1c, 0xc, 0x1, 0x2, [{@remote, 0x20}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x2}, {@loopback, 0x206}]}, @ra={0x94, 0x4}]}}}}}) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0xf343939d6235b2e1, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1b}}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x20, 0x80, 0x5, 0x6, {{0x20, 0x4, 0x0, 0x1, 0x80, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010102, @multicast2, {[@rr={0x7, 0x13, 0xf3, [@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x15}, @multicast2]}, @rr={0x7, 0x7, 0x55, [@local]}, @timestamp_prespec={0x44, 0x24, 0xb9, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0xfffffe01}, {@multicast2, 0x3f}, {@local, 0x91}, {@loopback, 0x3}]}, @end, @timestamp_addr={0x44, 0xc, 0x4f, 0x1, 0x0, [{@local, 0xffff}]}, @timestamp_addr={0x44, 0x1c, 0xc, 0x1, 0x2, [{@remote, 0x20}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x2}, {@loopback, 0x206}]}, @ra={0x94, 0x4}]}}}}}) (async) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0xf343939d6235b2e1, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1b}}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 20:24:53 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x1, 0x0, 0xcf, &(0x7f0000000040)={0x3, 0x0, 0x100a}}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid\x00') 20:24:53 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x1407, 0x400, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040040}, 0x44000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x140e, 0x200, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x851}, 0x10040800) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x1412, 0x20, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x40004) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x140c, 0x800, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) 20:24:53 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') 20:24:53 executing program 1: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x1, 0x0, 0xcf, &(0x7f0000000040)={0x3, 0x0, 0x100a}}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid\x00') 20:24:53 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') 20:24:53 executing program 0: ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x2, "abaffc133e33962b49c1b15ccb167ee0d3d04a997531985d9ccd90bb77619b98", 0xffffffffffffffff}) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) setpgid(r1, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000080)) 20:24:53 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x20, 0x80, 0x5, 0x6, {{0x20, 0x4, 0x0, 0x1, 0x80, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010102, @multicast2, {[@rr={0x7, 0x13, 0xf3, [@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x15}, @multicast2]}, @rr={0x7, 0x7, 0x55, [@local]}, @timestamp_prespec={0x44, 0x24, 0xb9, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0xfffffe01}, {@multicast2, 0x3f}, {@local, 0x91}, {@loopback, 0x3}]}, @end, @timestamp_addr={0x44, 0xc, 0x4f, 0x1, 0x0, [{@local, 0xffff}]}, @timestamp_addr={0x44, 0x1c, 0xc, 0x1, 0x2, [{@remote, 0x20}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x2}, {@loopback, 0x206}]}, @ra={0x94, 0x4}]}}}}}) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0xf343939d6235b2e1, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1b}}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) 20:24:53 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000000)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:53 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r2, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3a}}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) 20:24:53 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x860, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f0000000000)) 20:24:53 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000000)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:53 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x1, 0x0, 0xcf, &(0x7f0000000040)={0x3, 0x0, 0x100a}}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid\x00') 20:24:53 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, '/dev/hwrng\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4020}, 0x40) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r4, 0x7439) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="200025bd7000fddbdf25020000000c00078008000100", @ANYRES32, @ANYBLOB="2400078008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x351143, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r5, 0x7439) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1200, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) 20:24:53 executing program 1: pkey_alloc(0x0, 0x0) 20:24:53 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) (async) ioctl$PPPIOCDISCONN(r3, 0x7439) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r2, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3a}}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) 20:24:53 executing program 0: ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x2, "abaffc133e33962b49c1b15ccb167ee0d3d04a997531985d9ccd90bb77619b98", 0xffffffffffffffff}) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) setpgid(r1, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000080)) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x2, "abaffc133e33962b49c1b15ccb167ee0d3d04a997531985d9ccd90bb77619b98"}) (async) getpgid(0x0) (async) sched_rr_get_interval(r1, &(0x7f0000000ac0)) (async) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) (async) setpgid(r1, r2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000080)) (async) 20:24:53 executing program 1: pkey_alloc(0x0, 0x0) 20:24:53 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r2, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3a}}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) 20:24:53 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000000)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:53 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, '/dev/hwrng\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4020}, 0x40) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) (async, rerun: 64) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r4, 0x7439) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="200025bd7000fddbdf25020000000c00078008000100", @ANYRES32, @ANYBLOB="2400078008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x351143, 0x0) (async) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r5, 0x7439) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1200, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) 20:24:53 executing program 3: syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1405, 0x400, 0x70bd2a, 0x25dfdbfc}, 0x10}}, 0x4001050) 20:24:53 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) ioctl$PPPIOCDISCONN(r1, 0x7439) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x860, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x860, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f0000000000)) 20:24:53 executing program 1: pkey_alloc(0x0, 0x0) 20:24:53 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x140680, 0x0) 20:24:53 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, '/dev/hwrng\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4020}, 0x40) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r4, 0x7439) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="200025bd7000fddbdf25020000000c00078008000100", @ANYRES32, @ANYBLOB="2400078008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x351143, 0x0) (async) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r5, 0x7439) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1200, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) 20:24:53 executing program 3: syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1405, 0x400, 0x70bd2a, 0x25dfdbfc}, 0x10}}, 0x4001050) 20:24:53 executing program 0: ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x2, "abaffc133e33962b49c1b15ccb167ee0d3d04a997531985d9ccd90bb77619b98", 0xffffffffffffffff}) getpgid(0x0) (async) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) setpgid(r1, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000080)) (async) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000080)) 20:24:53 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000800) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x1411, 0x4, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24}, 0x11) 20:24:53 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x140680, 0x0) 20:24:53 executing program 3: syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1405, 0x400, 0x70bd2a, 0x25dfdbfc}, 0x10}}, 0x4001050) 20:24:53 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x1402, 0x200, 0x70bd2d, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x850}, 0x24008001) 20:24:53 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x860, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x860, 0x0) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f0000000000)) (async) 20:24:53 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000800) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x1411, 0x4, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24}, 0x11) 20:24:53 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x140680, 0x0) 20:24:53 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x1402, 0x200, 0x70bd2d, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x850}, 0x24008001) (async) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x1402, 0x200, 0x70bd2d, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x850}, 0x24008001) 20:24:53 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x3000000) inotify_rm_watch(0xffffffffffffffff, r0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040001}, 0x40000d1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, 0x0, 0x25, 0x2}, 0x10) 20:24:54 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000800) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x1411, 0x4, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24}, 0x11) 20:24:54 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x1402, 0x200, 0x70bd2d, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x850}, 0x24008001) 20:24:54 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x15b4aa7fd08f0ee0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2222000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x5c, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfff}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xf8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x20}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200000c5}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:54 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000000)=0x401) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40940, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x6, 0x5, 0x11}, {0x7f, 0x7, 0xff, 0x900}, {0xcf30, 0x0, 0x7, 0x1ff}, {0xf54f, 0x81, 0x3, 0x400}, {0x52a0, 0x1, 0x6, 0x650e}, {0x35, 0x3, 0xd0, 0x2}, {0x8, 0x95, 0x4, 0x4}]}) 20:24:54 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x3000000) inotify_rm_watch(0xffffffffffffffff, r0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040001}, 0x40000d1) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, 0x0, 0x25, 0x2}, 0x10) 20:24:54 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @broadcast}}}}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x1402, 0x704, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x44) 20:24:54 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x58801, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 20:24:54 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x3000000) inotify_rm_watch(0xffffffffffffffff, r0) (async) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040001}, 0x40000d1) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, 0x0, 0x25, 0x2}, 0x10) 20:24:54 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @broadcast}}}}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) (async) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x1402, 0x704, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x44) 20:24:54 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x15b4aa7fd08f0ee0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2222000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x5c, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfff}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xf8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x20}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200000c5}, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:54 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x58801, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x58801, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) 20:24:54 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000006161af4d001000009d", @ANYRES16=0x0, @ANYBLOB="0000000000000000000096b26b6f4dbe2f94c4c1e5c9e8336870e330a079f5ccf3d4d52460acc19615b2d0e2c08092ac132c91e1977a669af4cf04f7095e3b88d263486755efee61b24ec9a749d0697778a56df5de3094f54a9bfa3ff6f16d1089498dbff67a3c581a24134f43f9197b98ff1dc49bd8096cd8c1dde84d59cbaeac0977b3d910e984ec111b82af3e86f2e47ec0f5764eb89d673e4fe28cdb7efe9e9e616ccb4597796ea21d69b5d1748b8289f0daf8909a970dc13076bcb28797bda46f9eb0176bc696a441edda2ef9"], 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x4) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) setsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000140), 0x5, 0x20000) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000000300)={0x54, 0x0, 0x4, {0x2, 0x3e4}, {0x7, 0x7}, @rumble={0x2, 0xb8a6}}) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f00000001c0)) 20:24:54 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xd8, 0x0, 0x923, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8f0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x79, 0xa, '(,X.y\x01\xce\xc4\x1d\xf0B\rC\x97\xcc\xe2\xaby=\xd4\x9b\x9e5\xcb\b\xf4\xc8\xadW\x92\xf8\x82\xe1m\\\xb6\xf7;\x96\xfb\x96\xa8\xd7a\xa4\x00E%\x90\x99\xa8\xeb\xfbB\x9df5%{Ul\xee\n\xb6\x9as\x9e\xd2V\x8b\xd4K\x83\xea+\xb9\xe3:\xe0\x0fZ\xa1\ta)3\xa0\xb5eg\xf8F\xc8\xe4\x19\xa8AJ\x8d>\x81\xb2\xd1\xf3\xfe\xf5$M\niV\xddrt0\x88\x17'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x40080) 20:24:54 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000000)=0x401) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40940, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x6, 0x5, 0x11}, {0x7f, 0x7, 0xff, 0x900}, {0xcf30, 0x0, 0x7, 0x1ff}, {0xf54f, 0x81, 0x3, 0x400}, {0x52a0, 0x1, 0x6, 0x650e}, {0x35, 0x3, 0xd0, 0x2}, {0x8, 0x95, 0x4, 0x4}]}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000000)=0x401) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40940, 0x0) (async) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x6, 0x5, 0x11}, {0x7f, 0x7, 0xff, 0x900}, {0xcf30, 0x0, 0x7, 0x1ff}, {0xf54f, 0x81, 0x3, 0x400}, {0x52a0, 0x1, 0x6, 0x650e}, {0x35, 0x3, 0xd0, 0x2}, {0x8, 0x95, 0x4, 0x4}]}) (async) 20:24:54 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @broadcast}}}}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x1402, 0x704, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x44) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @broadcast}}}}) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') (async) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x1402, 0x704, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x44) (async) 20:24:54 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x15b4aa7fd08f0ee0, 0x0) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x15b4aa7fd08f0ee0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2222000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x5c, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfff}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xf8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x20}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200000c5}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:54 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x58801, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 20:24:54 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xd8, 0x0, 0x923, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8f0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x79, 0xa, '(,X.y\x01\xce\xc4\x1d\xf0B\rC\x97\xcc\xe2\xaby=\xd4\x9b\x9e5\xcb\b\xf4\xc8\xadW\x92\xf8\x82\xe1m\\\xb6\xf7;\x96\xfb\x96\xa8\xd7a\xa4\x00E%\x90\x99\xa8\xeb\xfbB\x9df5%{Ul\xee\n\xb6\x9as\x9e\xd2V\x8b\xd4K\x83\xea+\xb9\xe3:\xe0\x0fZ\xa1\ta)3\xa0\xb5eg\xf8F\xc8\xe4\x19\xa8AJ\x8d>\x81\xb2\xd1\xf3\xfe\xf5$M\niV\xddrt0\x88\x17'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x40080) 20:24:54 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) inotify_rm_watch(r0, 0x0) write$vhost_msg_v2(r0, &(0x7f00000001c0)={0x2, 0x0, {&(0x7f0000000080)=""/99, 0x63, &(0x7f0000000100)=""/190, 0x1, 0x1}}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') 20:24:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000000000000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r4, 0x7439) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r5, 0x7439) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x436881fab4bae10c}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x8, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x894) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:54 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xd8, 0x0, 0x923, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8f0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x79, 0xa, '(,X.y\x01\xce\xc4\x1d\xf0B\rC\x97\xcc\xe2\xaby=\xd4\x9b\x9e5\xcb\b\xf4\xc8\xadW\x92\xf8\x82\xe1m\\\xb6\xf7;\x96\xfb\x96\xa8\xd7a\xa4\x00E%\x90\x99\xa8\xeb\xfbB\x9df5%{Ul\xee\n\xb6\x9as\x9e\xd2V\x8b\xd4K\x83\xea+\xb9\xe3:\xe0\x0fZ\xa1\ta)3\xa0\xb5eg\xf8F\xc8\xe4\x19\xa8AJ\x8d>\x81\xb2\xd1\xf3\xfe\xf5$M\niV\xddrt0\x88\x17'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x40080) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xd8, 0x0, 0x923, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8f0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x79, 0xa, '(,X.y\x01\xce\xc4\x1d\xf0B\rC\x97\xcc\xe2\xaby=\xd4\x9b\x9e5\xcb\b\xf4\xc8\xadW\x92\xf8\x82\xe1m\\\xb6\xf7;\x96\xfb\x96\xa8\xd7a\xa4\x00E%\x90\x99\xa8\xeb\xfbB\x9df5%{Ul\xee\n\xb6\x9as\x9e\xd2V\x8b\xd4K\x83\xea+\xb9\xe3:\xe0\x0fZ\xa1\ta)3\xa0\xb5eg\xf8F\xc8\xe4\x19\xa8AJ\x8d>\x81\xb2\xd1\xf3\xfe\xf5$M\niV\xddrt0\x88\x17'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x40080) 20:24:54 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000280)={0x0, 0x0, {0x5, 0xffffffff, 0x3017, 0x4, 0x5, 0x3}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000140)) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1000"/16], 0x10}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000b14000229bd7000ffdbdf2508003f000201000008000300f8000000080001000000000008003f001061000008003f0005000200"], 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x8081) 20:24:54 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000000)=0x401) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40940, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x6, 0x5, 0x11}, {0x7f, 0x7, 0xff, 0x900}, {0xcf30, 0x0, 0x7, 0x1ff}, {0xf54f, 0x81, 0x3, 0x400}, {0x52a0, 0x1, 0x6, 0x650e}, {0x35, 0x3, 0xd0, 0x2}, {0x8, 0x95, 0x4, 0x4}]}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000000)=0x401) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40940, 0x0) (async) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x6, 0x5, 0x11}, {0x7f, 0x7, 0xff, 0x900}, {0xcf30, 0x0, 0x7, 0x1ff}, {0xf54f, 0x81, 0x3, 0x400}, {0x52a0, 0x1, 0x6, 0x650e}, {0x35, 0x3, 0xd0, 0x2}, {0x8, 0x95, 0x4, 0x4}]}) (async) 20:24:54 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000006161af4d001000009d", @ANYRES16=0x0, @ANYBLOB="0000000000000000000096b26b6f4dbe2f94c4c1e5c9e8336870e330a079f5ccf3d4d52460acc19615b2d0e2c08092ac132c91e1977a669af4cf04f7095e3b88d263486755efee61b24ec9a749d0697778a56df5de3094f54a9bfa3ff6f16d1089498dbff67a3c581a24134f43f9197b98ff1dc49bd8096cd8c1dde84d59cbaeac0977b3d910e984ec111b82af3e86f2e47ec0f5764eb89d673e4fe28cdb7efe9e9e616ccb4597796ea21d69b5d1748b8289f0daf8909a970dc13076bcb28797bda46f9eb0176bc696a441edda2ef9"], 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x4) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) setsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000140), 0x5, 0x20000) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000000300)={0x54, 0x0, 0x4, {0x2, 0x3e4}, {0x7, 0x7}, @rumble={0x2, 0xb8a6}}) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f00000001c0)) 20:24:54 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000280)={0x0, 0x0, {0x5, 0xffffffff, 0x3017, 0x4, 0x5, 0x3}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000140)) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1000"/16], 0x10}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000b14000229bd7000ffdbdf2508003f000201000008000300f8000000080001000000000008003f001061000008003f0005000200"], 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x8081) 20:24:54 executing program 1: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) inotify_rm_watch(r0, 0x0) write$vhost_msg_v2(r0, &(0x7f00000001c0)={0x2, 0x0, {&(0x7f0000000080)=""/99, 0x63, &(0x7f0000000100)=""/190, 0x1, 0x1}}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') 20:24:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000000000000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 64) ioctl$PPPIOCDISCONN(r3, 0x7439) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r4, 0x7439) (async) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r5, 0x7439) (async) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x436881fab4bae10c}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async, rerun: 64) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x8, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x894) (rerun: 64) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:54 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1404, 0x300, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x800) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x711, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40814}, 0x20040000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') 20:24:54 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000000)=0x2) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)=0x6) 20:24:54 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1404, 0x300, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x800) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1404, 0x300, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x800) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x711, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40814}, 0x20040000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') 20:24:54 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) inotify_rm_watch(r0, 0x0) (async) write$vhost_msg_v2(r0, &(0x7f00000001c0)={0x2, 0x0, {&(0x7f0000000080)=""/99, 0x63, &(0x7f0000000100)=""/190, 0x1, 0x1}}, 0x48) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') 20:24:54 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) ioctl$PPPIOCDISCONN(r1, 0x7439) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000280)={0x0, 0x0, {0x5, 0xffffffff, 0x3017, 0x4, 0x5, 0x3}}) (async) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000280)={0x0, 0x0, {0x5, 0xffffffff, 0x3017, 0x4, 0x5, 0x3}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000140)) (async) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000140)) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1000"/16], 0x10}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000b14000229bd7000ffdbdf2508003f000201000008000300f8000000080001000000000008003f001061000008003f0005000200"], 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x8081) 20:24:54 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1404, 0x300, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x800) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x711, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40814}, 0x20040000) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') 20:24:54 executing program 1: r0 = getpgid(0x0) r1 = getpgid(r0) getpgid(0x0) r2 = getpgid(0x0) sched_rr_get_interval(r2, &(0x7f0000000ac0)) getpid() r3 = getpid() sched_rr_get_interval(r3, &(0x7f0000000140)) sched_rr_get_interval(r1, &(0x7f0000000000)) r4 = getpgid(r0) sched_rr_get_interval(r4, &(0x7f0000000ac0)) syz_open_procfs$namespace(r4, &(0x7f0000000100)='ns/user\x00') clock_gettime(0x1, &(0x7f00000000c0)) getpgrp(r4) r5 = getpgid(0x0) sched_rr_get_interval(r5, &(0x7f0000000ac0)) sched_rr_get_interval(r5, &(0x7f0000000040)) clock_gettime(0x2, &(0x7f0000000080)) 20:24:54 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0x5, 0x1, 0x0, r0}, @map_idx={0x18, 0xff11ed21e0d9b1c, 0x5, 0x0, 0xa}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @ldst={0x0, 0x0, 0x0, 0x1, 0x1, 0xfffffffffffffff0}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x7e, &(0x7f0000000140)=""/126, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0xd, 0x8, 0x2}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r2]}, 0x80) 20:24:54 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) (async) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000006161af4d001000009d", @ANYRES16=0x0, @ANYBLOB="0000000000000000000096b26b6f4dbe2f94c4c1e5c9e8336870e330a079f5ccf3d4d52460acc19615b2d0e2c08092ac132c91e1977a669af4cf04f7095e3b88d263486755efee61b24ec9a749d0697778a56df5de3094f54a9bfa3ff6f16d1089498dbff67a3c581a24134f43f9197b98ff1dc49bd8096cd8c1dde84d59cbaeac0977b3d910e984ec111b82af3e86f2e47ec0f5764eb89d673e4fe28cdb7efe9e9e616ccb4597796ea21d69b5d1748b8289f0daf8909a970dc13076bcb28797bda46f9eb0176bc696a441edda2ef9"], 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x4) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) (async) setsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000140), 0x5, 0x20000) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000000300)={0x54, 0x0, 0x4, {0x2, 0x3e4}, {0x7, 0x7}, @rumble={0x2, 0xb8a6}}) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f00000001c0)) 20:24:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000000000000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r4, 0x7439) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r5, 0x7439) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x436881fab4bae10c}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x8, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x894) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:54 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) socket$packet(0x11, 0x3, 0x300) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') 20:24:54 executing program 1: r0 = getpgid(0x0) r1 = getpgid(r0) (async) getpgid(0x0) (async) r2 = getpgid(0x0) sched_rr_get_interval(r2, &(0x7f0000000ac0)) getpid() (async) r3 = getpid() sched_rr_get_interval(r3, &(0x7f0000000140)) (async) sched_rr_get_interval(r1, &(0x7f0000000000)) r4 = getpgid(r0) sched_rr_get_interval(r4, &(0x7f0000000ac0)) syz_open_procfs$namespace(r4, &(0x7f0000000100)='ns/user\x00') (async) clock_gettime(0x1, &(0x7f00000000c0)) (async) getpgrp(r4) r5 = getpgid(0x0) sched_rr_get_interval(r5, &(0x7f0000000ac0)) sched_rr_get_interval(r5, &(0x7f0000000040)) (async) clock_gettime(0x2, &(0x7f0000000080)) 20:24:54 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) ioctl$PPPIOCDISCONN(r1, 0x7439) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0x5, 0x1, 0x0, r0}, @map_idx={0x18, 0xff11ed21e0d9b1c, 0x5, 0x0, 0xa}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @ldst={0x0, 0x0, 0x0, 0x1, 0x1, 0xfffffffffffffff0}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x7e, &(0x7f0000000140)=""/126, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0xd, 0x8, 0x2}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r2]}, 0x80) 20:24:54 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000000)=0x2) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)=0x6) 20:24:54 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) socket$packet(0x11, 0x3, 0x300) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') 20:24:54 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '+.}'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffeff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x1404, 0x20, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc884}, 0x8041) 20:24:54 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0x5, 0x1, 0x0, r0}, @map_idx={0x18, 0xff11ed21e0d9b1c, 0x5, 0x0, 0xa}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @ldst={0x0, 0x0, 0x0, 0x1, 0x1, 0xfffffffffffffff0}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x7e, &(0x7f0000000140)=""/126, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0xd, 0x8, 0x2}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r2]}, 0x80) 20:24:54 executing program 1: r0 = getpgid(0x0) r1 = getpgid(r0) getpgid(0x0) r2 = getpgid(0x0) sched_rr_get_interval(r2, &(0x7f0000000ac0)) getpid() r3 = getpid() sched_rr_get_interval(r3, &(0x7f0000000140)) sched_rr_get_interval(r1, &(0x7f0000000000)) r4 = getpgid(r0) sched_rr_get_interval(r4, &(0x7f0000000ac0)) syz_open_procfs$namespace(r4, &(0x7f0000000100)='ns/user\x00') clock_gettime(0x1, &(0x7f00000000c0)) getpgrp(r4) r5 = getpgid(0x0) sched_rr_get_interval(r5, &(0x7f0000000ac0)) sched_rr_get_interval(r5, &(0x7f0000000040)) clock_gettime(0x2, &(0x7f0000000080)) getpgid(0x0) (async) getpgid(r0) (async) getpgid(0x0) (async) getpgid(0x0) (async) sched_rr_get_interval(r2, &(0x7f0000000ac0)) (async) getpid() (async) getpid() (async) sched_rr_get_interval(r3, &(0x7f0000000140)) (async) sched_rr_get_interval(r1, &(0x7f0000000000)) (async) getpgid(r0) (async) sched_rr_get_interval(r4, &(0x7f0000000ac0)) (async) syz_open_procfs$namespace(r4, &(0x7f0000000100)='ns/user\x00') (async) clock_gettime(0x1, &(0x7f00000000c0)) (async) getpgrp(r4) (async) getpgid(0x0) (async) sched_rr_get_interval(r5, &(0x7f0000000ac0)) (async) sched_rr_get_interval(r5, &(0x7f0000000040)) (async) clock_gettime(0x2, &(0x7f0000000080)) (async) 20:24:54 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '+.}'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffeff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x1404, 0x20, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc884}, 0x8041) 20:24:54 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) socket$packet(0x11, 0x3, 0x300) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket$phonet_pipe(0x23, 0x5, 0x2) (async) socket$packet(0x11, 0x3, 0x300) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') (async) 20:24:54 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000000)=0x8000) 20:24:54 executing program 2: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/uts\x00') 20:24:54 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '+.}'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffeff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x1404, 0x20, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc884}, 0x8041) 20:24:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) ioctl$VFIO_GET_API_VERSION(r1, 0x3b64) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:54 executing program 0: inotify_init1(0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x385400, 0x0) 20:24:54 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000000)=0x2) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)=0x6) 20:24:54 executing program 2: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/uts\x00') getpgid(0x0) (async) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/uts\x00') (async) 20:24:54 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') 20:24:55 executing program 0: inotify_init1(0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x385400, 0x0) inotify_init1(0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x385400, 0x0) (async) 20:24:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) ioctl$VFIO_GET_API_VERSION(r1, 0x3b64) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) ioctl$VFIO_GET_API_VERSION(r1, 0x3b64) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) 20:24:55 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') 20:24:55 executing program 2: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/uts\x00') 20:24:55 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000000)=0x8000) 20:24:55 executing program 0: inotify_init1(0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x385400, 0x0) inotify_init1(0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x385400, 0x0) (async) 20:24:55 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') 20:24:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) ioctl$VFIO_GET_API_VERSION(r1, 0x3b64) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) ioctl$VFIO_GET_API_VERSION(r1, 0x3b64) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) 20:24:55 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x1407, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) 20:24:55 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x70401, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000140)=""/110) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x7, 0x40, 0x1f, 0x1}, {0x3, 0x8, 0x9, 0x6}, {0x3, 0x5, 0xe0, 0x4}, {0x1000, 0x4, 0x6, 0x101}, {0x1, 0x9, 0x8, 0x4}, {0x6, 0x51, 0x40, 0x4}]}) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)) 20:24:55 executing program 0: r0 = getpgid(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') 20:24:55 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:55 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000000)=0x8000) 20:24:55 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:55 executing program 0: r0 = getpgid(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') 20:24:55 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x1407, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) 20:24:55 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:55 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x480001, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f00000001c0)) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x1) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x260002, 0x0) ioctl$PPPIOCGIDLE32(r5, 0x8008743f, &(0x7f0000000240)) ioctl$PPPIOCDISCONN(r4, 0x7439) accept$phonet_pipe(r4, &(0x7f00000000c0), &(0x7f0000000100)=0xfffffe8d) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="67446698000000000000030001000000039403f6404c603a730782ffd6a844a75f3b0a8db47130353d4e176eff8cb12d2320cc40798446705bdcb94da61648f1cc284dc4689796b869cc2de541d5d5f2fdbddd9804e76d9f7d757d38d1b1a43d3840642d7411658c455000d9ecc31e6142962672772c3815e201d16a059885a10ff1e885b49818a30724d2400812de04969dc64cc1376ffcbb483717fc7ca9dba0dd187baf72c4dba151ae3d26ba6a7010b11997438ffd5dfb4104484c2da3a8b892a842e72a8c3fbce28b27c741da8e477307410665d5cfa3d7b9eafb21e1acb05b6088563ef1f263b32528f61a9259cfdbeb963e2c2a3964cc4fd4b665461ba1bfe9ccec823670820d9e1fc12dabf629568cb1c3c16ae73fd815a6b5b910a3418b858a6807090c569dcbec3c0318086444b163373fbb7dff3378eb25127ea1cab37d38d063a177e383cc437d64cee2b3f5f4f578b8e66347358272f9daa13e86aba7dc9587bb4b7c92325169e2fc1d5340a91227391c08de195fa87789cbb38c20ca6991464052553f78a23288adc03e1b527d43942f0445c60151a884b47b980060ab5e55d87260bdf2ede6df4147aa85b795461306cdde2d23eb53aff30eea9c84f2a78bba489560241e7b79043b925a89c4ba32bba96e0e9c5e569848ffd951239e5ea14930f01067cf889da374f050125022464dd222a3b046e941c886ce8a5f970587c5f00f5cbf02e8fcde2c5b4ea9d17a23a44574e81cb8181a6afffe47e85dc267d9a29866d102ab29204a6a622110b5213ef0d05c877a49340d9e3a262c76d62b293e075ec20db74f60b10912491d29a4ffe10aed07c136b9080262d6ca80c5ff0ec3defb2e85b16e6f79bdec6e2e361b48a2cc85ffff2d8c62c25fd8d35fff1e95908371f2e02ddf9128e4dacee1ec2a9e2752592fab8c24f648ab7702230c159f144f84168ebe025fc8c02ad6d8324c6b4dbbdf6cf0758796ff567b18391f5e1ccca7ba412a8eac7c02adbfbe8ab8cfd5eddc34330598865a669fd0448753ffcba0a02a18765a35776555ab7ae53aa29b78635e5d2d014faab0e5bb1a0b222c211c03cf6a6d87ee3169242d8c3c1a01d9413ee75f17a36975ac3d26357f57e1", @ANYRESDEC=r3], 0x19e) 20:24:55 executing program 0: r0 = getpgid(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') 20:24:55 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x480001, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f00000001c0)) (async) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f00000001c0)) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x1) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x260002, 0x0) ioctl$PPPIOCGIDLE32(r5, 0x8008743f, &(0x7f0000000240)) ioctl$PPPIOCDISCONN(r4, 0x7439) accept$phonet_pipe(r4, &(0x7f00000000c0), &(0x7f0000000100)=0xfffffe8d) (async) accept$phonet_pipe(r4, &(0x7f00000000c0), &(0x7f0000000100)=0xfffffe8d) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRESDEC=r3], 0x19e) (async) write$nbd(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRESDEC=r3], 0x19e) 20:24:55 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = getpgid(0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x1402, 0x1, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x48010}, 0x2404c080) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x80000001, 0x545300) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000000)={0x0, 0x0, {r0}, {0xffffffffffffffff}, 0x8000, 0x4}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x240, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000080)={0x4, 0x1, {r0}, {r3}, 0x2, 0x1}) syz_open_procfs$namespace(r5, &(0x7f00000000c0)='ns/ipc\x00') 20:24:55 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x70401, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000140)=""/110) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x7, 0x40, 0x1f, 0x1}, {0x3, 0x8, 0x9, 0x6}, {0x3, 0x5, 0xe0, 0x4}, {0x1000, 0x4, 0x6, 0x101}, {0x1, 0x9, 0x8, 0x4}, {0x6, 0x51, 0x40, 0x4}]}) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)) 20:24:55 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x1407, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) 20:24:55 executing program 0: r0 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid_for_children\x00') 20:24:55 executing program 4: prctl$PR_SVE_GET_VL(0x33, 0x1d43a) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xdp_cpumap_enqueue\x00'}, 0x10) 20:24:55 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x480001, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f00000001c0)) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x1) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x260002, 0x0) ioctl$PPPIOCGIDLE32(r5, 0x8008743f, &(0x7f0000000240)) ioctl$PPPIOCDISCONN(r4, 0x7439) (async) accept$phonet_pipe(r4, &(0x7f00000000c0), &(0x7f0000000100)=0xfffffe8d) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRESDEC=r3], 0x19e) 20:24:55 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r0 = getpgid(0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x1402, 0x1, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x48010}, 0x2404c080) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x80000001, 0x545300) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000000)={0x0, 0x0, {r0}, {0xffffffffffffffff}, 0x8000, 0x4}) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x240, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000080)={0x4, 0x1, {r0}, {r3}, 0x2, 0x1}) syz_open_procfs$namespace(r5, &(0x7f00000000c0)='ns/ipc\x00') 20:24:55 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x1407, 0x400, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x24}}, 0xc014) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f00000001c0)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x6, 0x8, 0x59, 0x120}, {0x0, 0x4, 0xc, 0x1c0}]}) 20:24:55 executing program 0: r0 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid_for_children\x00') getpgrp(0xffffffffffffffff) (async) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid_for_children\x00') (async) 20:24:55 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r0 = getpgid(0x0) (async, rerun: 64) r1 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x1402, 0x1, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x48010}, 0x2404c080) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x80000001, 0x545300) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000000)={0x0, 0x0, {r0}, {0xffffffffffffffff}, 0x8000, 0x4}) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x240, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000080)={0x4, 0x1, {r0}, {r3}, 0x2, 0x1}) syz_open_procfs$namespace(r5, &(0x7f00000000c0)='ns/ipc\x00') 20:24:55 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x70401, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000140)=""/110) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x7, 0x40, 0x1f, 0x1}, {0x3, 0x8, 0x9, 0x6}, {0x3, 0x5, 0xe0, 0x4}, {0x1000, 0x4, 0x6, 0x101}, {0x1, 0x9, 0x8, 0x4}, {0x6, 0x51, 0x40, 0x4}]}) (async) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)) 20:24:55 executing program 1: sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1409, 0x100, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}}, 0xc000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:55 executing program 0: getpgrp(0xffffffffffffffff) (async) r0 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid_for_children\x00') 20:24:55 executing program 4: prctl$PR_SVE_GET_VL(0x33, 0x1d43a) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xdp_cpumap_enqueue\x00'}, 0x10) 20:24:55 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x1407, 0x400, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x24}}, 0xc014) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f00000001c0)) (async) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x6, 0x8, 0x59, 0x120}, {0x0, 0x4, 0xc, 0x1c0}]}) 20:24:55 executing program 1: sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1409, 0x100, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}}, 0xc000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:55 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x40, 0x1, 0x1, 0xfffffff7}, {0x20, 0xf8, 0x40, 0x100}, {0x1, 0xcb, 0x4, 0x8000}, {0x8, 0x5, 0x0, 0x3}, {0x1, 0x4, 0xd4}, {0x8d7, 0x2, 0x8, 0x1}, {0x81, 0x84, 0x0, 0x8}]}) 20:24:55 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x199802, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x1407, 0x800, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}]}, 0x20}, 0x1, 0x0, 0x0, 0x88}, 0x10) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) inotify_init1(0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000200)) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x1410, 0x10, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}]}, 0x20}}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r3, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x404}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x24042810) 20:24:55 executing program 1: sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1409, 0x100, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}}, 0xc000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x44000) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') 20:24:55 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x1407, 0x400, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x24}}, 0xc014) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f00000001c0)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x6, 0x8, 0x59, 0x120}, {0x0, 0x4, 0xc, 0x1c0}]}) 20:24:55 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x199802, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x1407, 0x800, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}]}, 0x20}, 0x1, 0x0, 0x0, 0x88}, 0x10) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) (async, rerun: 64) inotify_init1(0x800) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000200)) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x1410, 0x10, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}]}, 0x20}}, 0x10) (async, rerun: 32) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00') (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r3, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x404}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x24042810) 20:24:55 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x40, 0x1, 0x1, 0xfffffff7}, {0x20, 0xf8, 0x40, 0x100}, {0x1, 0xcb, 0x4, 0x8000}, {0x8, 0x5, 0x0, 0x3}, {0x1, 0x4, 0xd4}, {0x8d7, 0x2, 0x8, 0x1}, {0x81, 0x84, 0x0, 0x8}]}) (async) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x40, 0x1, 0x1, 0xfffffff7}, {0x20, 0xf8, 0x40, 0x100}, {0x1, 0xcb, 0x4, 0x8000}, {0x8, 0x5, 0x0, 0x3}, {0x1, 0x4, 0xd4}, {0x8d7, 0x2, 0x8, 0x1}, {0x81, 0x84, 0x0, 0x8}]}) 20:24:55 executing program 4: prctl$PR_SVE_GET_VL(0x33, 0x1d43a) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xdp_cpumap_enqueue\x00'}, 0x10) 20:24:55 executing program 1: sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x42000}, 0x54) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/user\x00') syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/mnt\x00') 20:24:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x44000) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') 20:24:55 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x199802, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x199802, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x1407, 0x800, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}]}, 0x20}, 0x1, 0x0, 0x0, 0x88}, 0x10) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) inotify_init1(0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000200)) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000200)) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x1410, 0x10, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}]}, 0x20}}, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x1410, 0x10, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}]}, 0x20}}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00') socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r3, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x404}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x24042810) 20:24:55 executing program 1: sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x42000}, 0x54) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) (async) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) (async) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/user\x00') (async) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/mnt\x00') 20:24:55 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x40, 0x1, 0x1, 0xfffffff7}, {0x20, 0xf8, 0x40, 0x100}, {0x1, 0xcb, 0x4, 0x8000}, {0x8, 0x5, 0x0, 0x3}, {0x1, 0x4, 0xd4}, {0x8d7, 0x2, 0x8, 0x1}, {0x81, 0x84, 0x0, 0x8}]}) 20:24:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x44000) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (rerun: 64) 20:24:55 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() syz_open_procfs$namespace(r2, &(0x7f00000002c0)='ns/time\x00') r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}}, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="287130b2fea4e2e79ddea772dbc85a87c6a968c860f8935a719a5cee307e6393a8ab3a58ae2234251130124ea678862acbb568d3f0c9522419e0ca8ecffe09551c2acd06ba0a214b94368d140351e9b7c5fea121f546948d54905ed467cea860a168f1df8136414013c33b0d7c0b62b75ddcc196eaf20163b8ef4da4db81c53577801d1d1937fc92780ab917ee2ea535d22476726b766e58c203c5ad3024d2641c11db117f6fdc0328b3a5c8aa51711c50ad1874a0fa6c403823c6e502bdb80697963e68590a91043161ec32607a4f921d25d8f7ca040c47f1bfbe9fd19338479c6c6f0235ab7a3abdac7da7901c0c6d", @ANYRES16=r1, @ANYBLOB="000229bd7000fedbdf25020000000800020001000000080008000400000008000700", @ANYRESOCT=r4, @ANYRESDEC=r0], 0x2c}, 0x1, 0x0, 0x0, 0x24004084}, 0x200088d0) 20:24:55 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x1407, 0x1, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4880}, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/uts\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, 0x1402, 0x8, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x45}, 0x400e094) 20:24:55 executing program 1: sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x42000}, 0x54) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/user\x00') syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/mnt\x00') sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x42000}, 0x54) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) (async) getpgid(0x0) (async) sched_rr_get_interval(r1, &(0x7f0000000ac0)) (async) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/user\x00') (async) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/mnt\x00') (async) 20:24:55 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) 20:24:55 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = getpid() syz_open_procfs$namespace(r2, &(0x7f00000002c0)='ns/time\x00') (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}}, 0x0) (async) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="287130b2fea4e2e79ddea772dbc85a87c6a968c860f8935a719a5cee307e6393a8ab3a58ae2234251130124ea678862acbb568d3f0c9522419e0ca8ecffe09551c2acd06ba0a214b94368d140351e9b7c5fea121f546948d54905ed467cea860a168f1df8136414013c33b0d7c0b62b75ddcc196eaf20163b8ef4da4db81c53577801d1d1937fc92780ab917ee2ea535d22476726b766e58c203c5ad3024d2641c11db117f6fdc0328b3a5c8aa51711c50ad1874a0fa6c403823c6e502bdb80697963e68590a91043161ec32607a4f921d25d8f7ca040c47f1bfbe9fd19338479c6c6f0235ab7a3abdac7da7901c0c6d", @ANYRES16=r1, @ANYBLOB="000229bd7000fedbdf25020000000800020001000000080008000400000008000700", @ANYRESOCT=r4, @ANYRESDEC=r0], 0x2c}, 0x1, 0x0, 0x0, 0x24004084}, 0x200088d0) 20:24:55 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x1407, 0x1, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4880}, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/uts\x00') (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, 0x1402, 0x8, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x45}, 0x400e094) 20:24:55 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x220, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000040)=0x3) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000080)=0x9) 20:24:55 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r2 = getpid() (rerun: 64) syz_open_procfs$namespace(r2, &(0x7f00000002c0)='ns/time\x00') (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}}, 0x0) (async) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="287130b2fea4e2e79ddea772dbc85a87c6a968c860f8935a719a5cee307e6393a8ab3a58ae2234251130124ea678862acbb568d3f0c9522419e0ca8ecffe09551c2acd06ba0a214b94368d140351e9b7c5fea121f546948d54905ed467cea860a168f1df8136414013c33b0d7c0b62b75ddcc196eaf20163b8ef4da4db81c53577801d1d1937fc92780ab917ee2ea535d22476726b766e58c203c5ad3024d2641c11db117f6fdc0328b3a5c8aa51711c50ad1874a0fa6c403823c6e502bdb80697963e68590a91043161ec32607a4f921d25d8f7ca040c47f1bfbe9fd19338479c6c6f0235ab7a3abdac7da7901c0c6d", @ANYRES16=r1, @ANYBLOB="000229bd7000fedbdf25020000000800020001000000080008000400000008000700", @ANYRESOCT=r4, @ANYRESDEC=r0], 0x2c}, 0x1, 0x0, 0x0, 0x24004084}, 0x200088d0) 20:24:55 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x1407, 0x1, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4880}, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/uts\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, 0x1402, 0x8, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x45}, 0x400e094) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x1407, 0x1, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4880}, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/uts\x00') (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r2, 0x7439) (async) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, 0x1402, 0x8, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x45}, 0x400e094) (async) 20:24:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x501a00, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x7c50, 0xfff, 0x1ff, 0xffff0000]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xc343]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7ff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8001}, @SEG6_ATTR_ALGID={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000880) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3}, 0x14}}, 0x24000800) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="20002dbd7000fccbdf25010000000500040006000000d02a9551d0a32195d4b1626abdb7d61a6befac22432806659a7e56eea32a6bb1c993ee9f0e0262dce3fc5c7cf698f196f62b957331a65101c71535571083fbc1c19ecde81cd9da91baa16c72e1c17f67ec736ca6e09b6ae619e78c7a1162b9cea3149e"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x850) r4 = getpgrp(0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) syz_open_procfs$namespace(r4, &(0x7f0000000040)='ns/ipc\x00') 20:24:55 executing program 1: mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x3, 0x8010, 0xffffffffffffffff, 0x0) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:56 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) 20:24:56 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x381000, 0x0) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000040)) 20:24:56 executing program 1: mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x3, 0x8010, 0xffffffffffffffff, 0x0) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x501a00, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x7c50, 0xfff, 0x1ff, 0xffff0000]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xc343]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7ff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8001}, @SEG6_ATTR_ALGID={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000880) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3}, 0x14}}, 0x24000800) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="20002dbd7000fccbdf25010000000500040006000000d02a9551d0a32195d4b1626abdb7d61a6befac22432806659a7e56eea32a6bb1c993ee9f0e0262dce3fc5c7cf698f196f62b957331a65101c71535571083fbc1c19ecde81cd9da91baa16c72e1c17f67ec736ca6e09b6ae619e78c7a1162b9cea3149e"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x850) r4 = getpgrp(0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) (async) syz_open_procfs$namespace(r4, &(0x7f0000000040)='ns/ipc\x00') 20:24:56 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x220, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000040)=0x3) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (async) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000080)=0x9) 20:24:56 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x381000, 0x0) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000040)) 20:24:56 executing program 1: mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x3, 0x8010, 0xffffffffffffffff, 0x0) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:56 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) 20:24:56 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/uts\x00') 20:24:56 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x381000, 0x0) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000040)) 20:24:56 executing program 1: r0 = getpgid(0x0) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) sched_rr_get_interval(r0, &(0x7f0000000ac0)) r2 = getpgid(0x0) sched_rr_get_interval(r2, &(0x7f0000000ac0)) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/pid\x00') r3 = getpgrp(r2) getpgid(r3) getpid() r4 = getpgid(0x0) sched_rr_get_interval(r4, &(0x7f0000000ac0)) prlimit64(r4, 0x9, &(0x7f0000000040)={0x3, 0x3}, &(0x7f0000000080)) 20:24:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x501a00, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x7c50, 0xfff, 0x1ff, 0xffff0000]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xc343]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7ff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8001}, @SEG6_ATTR_ALGID={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000880) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3}, 0x14}}, 0x24000800) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="20002dbd7000fccbdf25010000000500040006000000d02a9551d0a32195d4b1626abdb7d61a6befac22432806659a7e56eea32a6bb1c993ee9f0e0262dce3fc5c7cf698f196f62b957331a65101c71535571083fbc1c19ecde81cd9da91baa16c72e1c17f67ec736ca6e09b6ae619e78c7a1162b9cea3149e"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x850) r4 = getpgrp(0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) syz_open_procfs$namespace(r4, &(0x7f0000000040)='ns/ipc\x00') socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x501a00, 0x0) (async) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x7c50, 0xfff, 0x1ff, 0xffff0000]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xc343]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7ff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8001}, @SEG6_ATTR_ALGID={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000880) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3}, 0x14}}, 0x24000800) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="20002dbd7000fccbdf25010000000500040006000000d02a9551d0a32195d4b1626abdb7d61a6befac22432806659a7e56eea32a6bb1c993ee9f0e0262dce3fc5c7cf698f196f62b957331a65101c71535571083fbc1c19ecde81cd9da91baa16c72e1c17f67ec736ca6e09b6ae619e78c7a1162b9cea3149e"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x850) (async) getpgrp(0x0) (async) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) (async) syz_open_procfs$namespace(r4, &(0x7f0000000040)='ns/ipc\x00') (async) 20:24:56 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x220, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000040)=0x3) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) (async, rerun: 64) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (async, rerun: 64) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000080)=0x9) 20:24:56 executing program 5: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/mnt\x00') 20:24:56 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/uts\x00') 20:24:56 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x210000, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000007c0)=0x2) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f0000000040)) 20:24:56 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r4, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vcan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4c800}, 0x1011) 20:24:56 executing program 1: r0 = getpgid(0x0) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) sched_rr_get_interval(r0, &(0x7f0000000ac0)) r2 = getpgid(0x0) sched_rr_get_interval(r2, &(0x7f0000000ac0)) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/pid\x00') r3 = getpgrp(r2) getpgid(r3) getpid() r4 = getpgid(0x0) sched_rr_get_interval(r4, &(0x7f0000000ac0)) prlimit64(r4, 0x9, &(0x7f0000000040)={0x3, 0x3}, &(0x7f0000000080)) getpgid(0x0) (async) getpgid(0x0) (async) sched_rr_get_interval(r1, &(0x7f0000000ac0)) (async) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) getpgid(0x0) (async) sched_rr_get_interval(r2, &(0x7f0000000ac0)) (async) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/pid\x00') (async) getpgrp(r2) (async) getpgid(r3) (async) getpid() (async) getpgid(0x0) (async) sched_rr_get_interval(r4, &(0x7f0000000ac0)) (async) prlimit64(r4, 0x9, &(0x7f0000000040)={0x3, 0x3}, &(0x7f0000000080)) (async) 20:24:56 executing program 5: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/mnt\x00') getpgid(0x0) (async) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/mnt\x00') (async) 20:24:56 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/uts\x00') 20:24:56 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000040)) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000000)) 20:24:56 executing program 1: r0 = getpgid(0x0) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000ac0)) (async) sched_rr_get_interval(r0, &(0x7f0000000ac0)) r2 = getpgid(0x0) sched_rr_get_interval(r2, &(0x7f0000000ac0)) (async) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/pid\x00') r3 = getpgrp(r2) getpgid(r3) (async) getpid() (async) r4 = getpgid(0x0) sched_rr_get_interval(r4, &(0x7f0000000ac0)) (async) prlimit64(r4, 0x9, &(0x7f0000000040)={0x3, 0x3}, &(0x7f0000000080)) 20:24:56 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) (rerun: 64) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) (async) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x2) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r4, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vcan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4c800}, 0x1011) 20:24:56 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101882, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x4802, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x1410, 0x4, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000811}, 0x8000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000040)=0x4402024) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x31020480}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x5c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '!.%'}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, '/dev/hwrng\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x20000001) ioctl$VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000380)={0x61, 0x7, 0x3, 0x3, "f1436634e7b92e3016ac716f0da9dc8b3c0e0f9b2d4d17fdebd09d30ec403fc112633bbb657fece0d627166bff4419a550b9095979897fd30e6d54b732a527181fdd244f5258eeb70a"}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') [ 561.857500] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 20:24:56 executing program 5: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/mnt\x00') 20:24:56 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000040)) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000040)) (async) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000000)) (async) 20:24:56 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x80, 0x80, 0x4, 0x5, {{0x1b, 0x4, 0x1, 0x3b, 0x6c, 0x66, 0x0, 0xfa, 0x2f, 0x0, @multicast1, @broadcast, {[@lsrr={0x83, 0x13, 0xe1, [@dev={0xac, 0x14, 0x14, 0x12}, @local, @broadcast, @local]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x28, 0x2e, 0x0, 0x8, [0x1000000, 0x0, 0x5, 0x0, 0x10001, 0x7, 0x6, 0x401, 0x7]}, @timestamp={0x44, 0x14, 0xb7, 0x0, 0x7, [0x6, 0x200, 0xffffffe1, 0x0]}, @generic={0x94, 0x2}]}}}}}) ioctl$PPPIOCDISCONN(r0, 0x7439) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x41000, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x181000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r8, 0x7439) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r10, 0x7439) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd8, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r2}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8}, {0x8, 0x1, r10}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x4094040) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:56 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async, rerun: 64) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x210000, 0x0) (async, rerun: 64) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 64) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) (rerun: 64) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000007c0)=0x2) (async) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f0000000040)) 20:24:56 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101882, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x4802, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x1410, 0x4, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000811}, 0x8000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000040)=0x4402024) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x31020480}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x5c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '!.%'}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, '/dev/hwrng\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x20000001) ioctl$VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000380)={0x61, 0x7, 0x3, 0x3, "f1436634e7b92e3016ac716f0da9dc8b3c0e0f9b2d4d17fdebd09d30ec403fc112633bbb657fece0d627166bff4419a550b9095979897fd30e6d54b732a527181fdd244f5258eeb70a"}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101882, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x4802, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x1410, 0x4, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000811}, 0x8000) (async) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000040)=0x4402024) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x31020480}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x5c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '!.%'}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, '/dev/hwrng\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x20000001) (async) ioctl$VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000380)={0x61, 0x7, 0x3, 0x3, "f1436634e7b92e3016ac716f0da9dc8b3c0e0f9b2d4d17fdebd09d30ec403fc112633bbb657fece0d627166bff4419a550b9095979897fd30e6d54b732a527181fdd244f5258eeb70a"}) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) 20:24:56 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000080)={0x100000000, 0x56280048, 0x9, 0x80000000}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000040)={0x0, 0x82, 0x9, 0xc8e}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f00000000c0)) 20:24:56 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) ioctl$PPPIOCDISCONN(r1, 0x7439) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x80, 0x80, 0x4, 0x5, {{0x1b, 0x4, 0x1, 0x3b, 0x6c, 0x66, 0x0, 0xfa, 0x2f, 0x0, @multicast1, @broadcast, {[@lsrr={0x83, 0x13, 0xe1, [@dev={0xac, 0x14, 0x14, 0x12}, @local, @broadcast, @local]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x28, 0x2e, 0x0, 0x8, [0x1000000, 0x0, 0x5, 0x0, 0x10001, 0x7, 0x6, 0x401, 0x7]}, @timestamp={0x44, 0x14, 0xb7, 0x0, 0x7, [0x6, 0x200, 0xffffffe1, 0x0]}, @generic={0x94, 0x2}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x80, 0x80, 0x4, 0x5, {{0x1b, 0x4, 0x1, 0x3b, 0x6c, 0x66, 0x0, 0xfa, 0x2f, 0x0, @multicast1, @broadcast, {[@lsrr={0x83, 0x13, 0xe1, [@dev={0xac, 0x14, 0x14, 0x12}, @local, @broadcast, @local]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x28, 0x2e, 0x0, 0x8, [0x1000000, 0x0, 0x5, 0x0, 0x10001, 0x7, 0x6, 0x401, 0x7]}, @timestamp={0x44, 0x14, 0xb7, 0x0, 0x7, [0x6, 0x200, 0xffffffe1, 0x0]}, @generic={0x94, 0x2}]}}}}}) ioctl$PPPIOCDISCONN(r0, 0x7439) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) (async) ioctl$PPPIOCDISCONN(r3, 0x7439) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x41000, 0x0) (async) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x41000, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x181000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r8, 0x7439) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r10, 0x7439) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd8, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r2}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8}, {0x8, 0x1, r10}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x4094040) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:56 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) (async) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r4, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vcan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4c800}, 0x1011) 20:24:56 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101882, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x4802, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x1410, 0x4, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000811}, 0x8000) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x1410, 0x4, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000811}, 0x8000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000040)=0x4402024) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x31020480}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x5c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '!.%'}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, '/dev/hwrng\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x20000001) ioctl$VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000380)={0x61, 0x7, 0x3, 0x3, "f1436634e7b92e3016ac716f0da9dc8b3c0e0f9b2d4d17fdebd09d30ec403fc112633bbb657fece0d627166bff4419a550b9095979897fd30e6d54b732a527181fdd244f5258eeb70a"}) (async) ioctl$VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000380)={0x61, 0x7, 0x3, 0x3, "f1436634e7b92e3016ac716f0da9dc8b3c0e0f9b2d4d17fdebd09d30ec403fc112633bbb657fece0d627166bff4419a550b9095979897fd30e6d54b732a527181fdd244f5258eeb70a"}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:56 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000040)) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000040)) (async) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000000)) (async) 20:24:56 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x80, 0x80, 0x4, 0x5, {{0x1b, 0x4, 0x1, 0x3b, 0x6c, 0x66, 0x0, 0xfa, 0x2f, 0x0, @multicast1, @broadcast, {[@lsrr={0x83, 0x13, 0xe1, [@dev={0xac, 0x14, 0x14, 0x12}, @local, @broadcast, @local]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x28, 0x2e, 0x0, 0x8, [0x1000000, 0x0, 0x5, 0x0, 0x10001, 0x7, 0x6, 0x401, 0x7]}, @timestamp={0x44, 0x14, 0xb7, 0x0, 0x7, [0x6, 0x200, 0xffffffe1, 0x0]}, @generic={0x94, 0x2}]}}}}}) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x41000, 0x0) (async) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x181000, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r8, 0x7439) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) (async) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r10, 0x7439) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd8, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r2}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8}, {0x8, 0x1, r10}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x4094040) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:56 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async, rerun: 64) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (rerun: 64) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000080)={0x100000000, 0x56280048, 0x9, 0x80000000}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async, rerun: 64) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000040)={0x0, 0x82, 0x9, 0xc8e}) (async, rerun: 64) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f00000000c0)) 20:24:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4010) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:56 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x4300, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x7) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7f}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3f}]}, 0x68}, 0x1, 0x0, 0x0, 0x40004}, 0x20004000) 20:24:56 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x210000, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000007c0)=0x2) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f0000000040)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x210000, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) (async) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000007c0)=0x2) (async) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000080)) (async) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f0000000040)) (async) 20:24:56 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x4300, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x7) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7f}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3f}]}, 0x68}, 0x1, 0x0, 0x0, 0x40004}, 0x20004000) 20:24:56 executing program 1: mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000140)) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f00000001c0)=0x5e8) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000200)=0x201) nanosleep(&(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000000c0)) syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:56 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000080)={0x100000000, 0x56280048, 0x9, 0x80000000}) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000040)={0x0, 0x82, 0x9, 0xc8e}) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f00000000c0)) 20:24:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4010) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4010) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) 20:24:56 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4010) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:56 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x4300, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x7) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7f}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3f}]}, 0x68}, 0x1, 0x0, 0x0, 0x40004}, 0x20004000) 20:24:56 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000040)=""/182) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid\x00') 20:24:56 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x8, 0x700, 0x0, 0x7fffffff, {{0xe, 0x4, 0x2, 0x7, 0x38, 0x67, 0x0, 0xa7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@ssrr={0x89, 0x3, 0x60}, @timestamp={0x44, 0x8, 0x65, 0x0, 0xc, [0x1000]}, @ssrr={0x89, 0x13, 0xde, [@loopback, @local, @loopback, @multicast1]}, @ra={0x94, 0x4}]}}}}}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00fc00", @ANYRES16=0x0, @ANYBLOB="02002dbd7000fedbdf2501000000080002000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000400ac1e000108000700", @ANYRES32=r0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r1, @ANYBLOB="c2ba842f2afbd5d1328dcdb19678f953323e827b7763a9441a4f86c2972102b6cf4a7966e22b78471c692eb6c2d7546c48cad5333c8bf86e0557870dc594f03c9258d97a88684818b6d5be2cd67ca8078f09d63413ab725bcc8d96c0321cae2fc7fafedd2db2a41f3d1ffba10b1b199258"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000080) 20:24:56 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r3, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 20:24:57 executing program 4: ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:57 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:57 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r3, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 20:24:57 executing program 1: mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000140)) (async) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f00000001c0)=0x5e8) (async) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000200)=0x201) (async) nanosleep(&(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000000c0)) syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:24:57 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000040)=""/182) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid\x00') syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000040)=""/182) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid\x00') (async) 20:24:57 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x8, 0x700, 0x0, 0x7fffffff, {{0xe, 0x4, 0x2, 0x7, 0x38, 0x67, 0x0, 0xa7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@ssrr={0x89, 0x3, 0x60}, @timestamp={0x44, 0x8, 0x65, 0x0, 0xc, [0x1000]}, @ssrr={0x89, 0x13, 0xde, [@loopback, @local, @loopback, @multicast1]}, @ra={0x94, 0x4}]}}}}}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00fc00", @ANYRES16=0x0, @ANYBLOB="02002dbd7000fedbdf2501000000080002000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000400ac1e000108000700", @ANYRES32=r0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r1, @ANYBLOB="c2ba842f2afbd5d1328dcdb19678f953323e827b7763a9441a4f86c2972102b6cf4a7966e22b78471c692eb6c2d7546c48cad5333c8bf86e0557870dc594f03c9258d97a88684818b6d5be2cd67ca8078f09d63413ab725bcc8d96c0321cae2fc7fafedd2db2a41f3d1ffba10b1b199258"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000080) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x8, 0x700, 0x0, 0x7fffffff, {{0xe, 0x4, 0x2, 0x7, 0x38, 0x67, 0x0, 0xa7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@ssrr={0x89, 0x3, 0x60}, @timestamp={0x44, 0x8, 0x65, 0x0, 0xc, [0x1000]}, @ssrr={0x89, 0x13, 0xde, [@loopback, @local, @loopback, @multicast1]}, @ra={0x94, 0x4}]}}}}}) (async) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00fc00", @ANYRES16=0x0, @ANYBLOB="02002dbd7000fedbdf2501000000080002000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000400ac1e000108000700", @ANYRES32=r0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r1, @ANYBLOB="c2ba842f2afbd5d1328dcdb19678f953323e827b7763a9441a4f86c2972102b6cf4a7966e22b78471c692eb6c2d7546c48cad5333c8bf86e0557870dc594f03c9258d97a88684818b6d5be2cd67ca8078f09d63413ab725bcc8d96c0321cae2fc7fafedd2db2a41f3d1ffba10b1b199258"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000080) (async) 20:24:57 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r3, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) (async) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r3, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) (async) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) 20:24:57 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:57 executing program 4: ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) 20:24:57 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000040)=""/182) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid\x00') 20:24:57 executing program 5: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/user\x00') r1 = syz_open_dev$dri(&(0x7f0000000000), 0x3f, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000040)) 20:24:57 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x8, 0x700, 0x0, 0x7fffffff, {{0xe, 0x4, 0x2, 0x7, 0x38, 0x67, 0x0, 0xa7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@ssrr={0x89, 0x3, 0x60}, @timestamp={0x44, 0x8, 0x65, 0x0, 0xc, [0x1000]}, @ssrr={0x89, 0x13, 0xde, [@loopback, @local, @loopback, @multicast1]}, @ra={0x94, 0x4}]}}}}}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00fc00", @ANYRES16=0x0, @ANYBLOB="02002dbd7000fedbdf2501000000080002000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000400ac1e000108000700", @ANYRES32=r0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r1, @ANYBLOB="c2ba842f2afbd5d1328dcdb19678f953323e827b7763a9441a4f86c2972102b6cf4a7966e22b78471c692eb6c2d7546c48cad5333c8bf86e0557870dc594f03c9258d97a88684818b6d5be2cd67ca8078f09d63413ab725bcc8d96c0321cae2fc7fafedd2db2a41f3d1ffba10b1b199258"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000080) 20:24:57 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x1) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000040)) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) socket$l2tp(0x2, 0x2, 0x73) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x100) 20:24:57 executing program 5: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/user\x00') (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x3f, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000040)) 20:24:57 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') 20:24:58 executing program 1: mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000140)) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f00000001c0)=0x5e8) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000200)=0x201) nanosleep(&(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000000c0)) syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000140)) (async) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f00000001c0)=0x5e8) (async) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000200)=0x201) (async) nanosleep(&(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000000c0)) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) 20:24:58 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs\x00', 0x1ff) 20:24:58 executing program 4: ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 20:24:58 executing program 5: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/user\x00') (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x3f, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000040)) 20:24:58 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') 20:24:58 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x1) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000040)) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) (async) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) socket$l2tp(0x2, 0x2, 0x73) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x100) 20:24:58 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') (async) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs\x00', 0x1ff) 20:24:58 executing program 4: ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000007c0)=0x5) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000001c0)=0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x840, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pkey_free(0xffffffffffffffff) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x9) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x24000, 0x0) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f0000000180)) 20:24:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffb, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={0x0, 0x2, 0x3, 0x9, 0x81, 0x6, 0x5, 0x3ff, 0x5, 0x1, 0x2, 0x10001}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan1\x00'}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x72d}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_DEBUG={0x8}]}, 0x5c}}, 0x20000010) r2 = getpgid(0x0) sched_rr_get_interval(r2, &(0x7f0000000ac0)) syz_open_procfs$namespace(r2, &(0x7f0000000100)='ns/time\x00') 20:24:58 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') 20:24:58 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') (async, rerun: 32) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs\x00', 0x1ff) (rerun: 32) 20:24:58 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) 20:24:58 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x1) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000040)) (async, rerun: 64) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) (rerun: 64) socket$l2tp(0x2, 0x2, 0x73) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x100) 20:24:58 executing program 2: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x15d) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x2a00, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000340)=0x4902414) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="83f3264e", @ANYRES16=0x0, @ANYBLOB="000c2cbd7000fbdbdf250100000006000600010000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x24046014) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x1401, 0x0, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x1) 20:24:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffb, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={0x0, 0x2, 0x3, 0x9, 0x81, 0x6, 0x5, 0x3ff, 0x5, 0x1, 0x2, 0x10001}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan1\x00'}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x72d}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_DEBUG={0x8}]}, 0x5c}}, 0x20000010) (async) r2 = getpgid(0x0) sched_rr_get_interval(r2, &(0x7f0000000ac0)) syz_open_procfs$namespace(r2, &(0x7f0000000100)='ns/time\x00') 20:24:58 executing program 4: ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000007c0)=0x5) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000001c0)=0x1) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x840, 0x0) (async, rerun: 64) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) (rerun: 64) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) pkey_free(0xffffffffffffffff) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x3) (async, rerun: 32) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x9) (async, rerun: 32) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f00000000c0)) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x24000, 0x0) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f0000000180)) 20:24:58 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) inotify_init1(0x800) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) getresuid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f00000001c0)) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='\x00', 0x80a1, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}], [{@dont_appraise}, {@subj_user={'subj_user', 0x3d, 'ns/time_for_children\x00'}}, {@obj_role={'obj_role', 0x3d, '/dev/hwrng\x00'}}]}}, 0x1, 0x0, &(0x7f0000000340)="9757ef5c123225f990a228187e47133a250964e1ddf42bf4dff916219f6d942c85244f416debc6351f8260bd3c5805d9adb3a847999a7dd6ed") ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)) 20:24:58 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) 20:24:58 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400b02, 0x0) 20:24:58 executing program 2: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x15d) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x2a00, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000340)=0x4902414) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="83f3264e", @ANYRES16=0x0, @ANYBLOB="000c2cbd7000fbdbdf250100000006000600010000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x24046014) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x1401, 0x0, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x1) 20:24:58 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) inotify_init1(0x800) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) getresuid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f00000001c0)) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='\x00', 0x80a1, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}], [{@dont_appraise}, {@subj_user={'subj_user', 0x3d, 'ns/time_for_children\x00'}}, {@obj_role={'obj_role', 0x3d, '/dev/hwrng\x00'}}]}}, 0x1, 0x0, &(0x7f0000000340)="9757ef5c123225f990a228187e47133a250964e1ddf42bf4dff916219f6d942c85244f416debc6351f8260bd3c5805d9adb3a847999a7dd6ed") ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) inotify_init1(0x800) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)) (async) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='\x00', 0x80a1, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}], [{@dont_appraise}, {@subj_user={'subj_user', 0x3d, 'ns/time_for_children\x00'}}, {@obj_role={'obj_role', 0x3d, '/dev/hwrng\x00'}}]}}, 0x1, 0x0, &(0x7f0000000340)="9757ef5c123225f990a228187e47133a250964e1ddf42bf4dff916219f6d942c85244f416debc6351f8260bd3c5805d9adb3a847999a7dd6ed") (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)) (async) 20:24:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffb, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={0x0, 0x2, 0x3, 0x9, 0x81, 0x6, 0x5, 0x3ff, 0x5, 0x1, 0x2, 0x10001}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan1\x00'}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x72d}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_DEBUG={0x8}]}, 0x5c}}, 0x20000010) r2 = getpgid(0x0) sched_rr_get_interval(r2, &(0x7f0000000ac0)) (async) syz_open_procfs$namespace(r2, &(0x7f0000000100)='ns/time\x00') 20:24:58 executing program 4: ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000007c0)=0x5) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000001c0)=0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x840, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pkey_free(0xffffffffffffffff) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x9) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f00000000c0)) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x24000, 0x0) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f0000000180)) 20:24:58 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) 20:24:59 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400b02, 0x0) 20:24:59 executing program 2: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x15d) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x2a00, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000340)=0x4902414) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="83f3264e", @ANYRES16=0x0, @ANYBLOB="000c2cbd7000fbdbdf250100000006000600010000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x24046014) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x1401, 0x0, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x15d) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x2a00, 0x0) (async) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000340)=0x4902414) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="83f3264e", @ANYRES16=0x0, @ANYBLOB="000c2cbd7000fbdbdf250100000006000600010000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x24046014) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x1401, 0x0, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async) 20:24:59 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x200004) 20:24:59 executing program 1: sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001214000128bd700ffbdbdf2508000100000000000800150001800000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4004050) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x100}, 0x4048001) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000980)={0x4c, 0x1407, 0x20, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x1412, 0x100, 0x70bd27, 0x25dfdbfa}, 0x10}, 0x1, 0x0, 0x0, 0x80d2}, 0xc0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000280)={0xffffffffffffffff}, 0x1, {0xa, 0x4e21, 0x81, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000300)={0x11, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f00000006c0)={0x2, 0x80000000}) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x4000800) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x53dd02, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000400)={0x10, 0x30, 0xfa00, {&(0x7f00000003c0)={0xffffffffffffffff}, 0x2, {0xa, 0x4e24, 0x0, @remote, 0xff}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, &(0x7f0000000440)={0x11, 0x10, 0xfa00, {&(0x7f0000000380), r6}}, 0x18) 20:24:59 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async, rerun: 64) inotify_init1(0x800) (rerun: 64) ioctl$PPPIOCDISCONN(r0, 0x7439) (async, rerun: 64) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 64) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) getresuid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f00000001c0)) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='\x00', 0x80a1, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}], [{@dont_appraise}, {@subj_user={'subj_user', 0x3d, 'ns/time_for_children\x00'}}, {@obj_role={'obj_role', 0x3d, '/dev/hwrng\x00'}}]}}, 0x1, 0x0, &(0x7f0000000340)="9757ef5c123225f990a228187e47133a250964e1ddf42bf4dff916219f6d942c85244f416debc6351f8260bd3c5805d9adb3a847999a7dd6ed") (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)) (rerun: 64) 20:24:59 executing program 1: sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001214000128bd700ffbdbdf2508000100000000000800150001800000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4004050) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x100}, 0x4048001) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000980)={0x4c, 0x1407, 0x20, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x1412, 0x100, 0x70bd27, 0x25dfdbfa}, 0x10}, 0x1, 0x0, 0x0, 0x80d2}, 0xc0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000280)={0xffffffffffffffff}, 0x1, {0xa, 0x4e21, 0x81, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000300)={0x11, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f00000006c0)={0x2, 0x80000000}) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x4000800) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x53dd02, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000400)={0x10, 0x30, 0xfa00, {&(0x7f00000003c0)={0xffffffffffffffff}, 0x2, {0xa, 0x4e24, 0x0, @remote, 0xff}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, &(0x7f0000000440)={0x11, 0x10, 0xfa00, {&(0x7f0000000380), r6}}, 0x18) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001214000128bd700ffbdbdf2508000100000000000800150001800000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4004050) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x100}, 0x4048001) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000980)={0x4c, 0x1407, 0x20, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x1412, 0x100, 0x70bd27, 0x25dfdbfa}, 0x10}, 0x1, 0x0, 0x0, 0x80d2}, 0xc0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000280), 0x1, {0xa, 0x4e21, 0x81, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}}, 0x38) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000300)={0x11, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f00000006c0)={0x2, 0x80000000}) (async) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), 0xffffffffffffffff) (async) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x4000800) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x53dd02, 0x0) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000400)={0x10, 0x30, 0xfa00, {&(0x7f00000003c0), 0x2, {0xa, 0x4e24, 0x0, @remote, 0xff}}}, 0x38) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, &(0x7f0000000440)={0x11, 0x10, 0xfa00, {&(0x7f0000000380), r6}}, 0x18) (async) 20:24:59 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000000), 0x4) 20:24:59 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x44040, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1410, 0x100, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) 20:24:59 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x200004) 20:24:59 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400b02, 0x0) 20:24:59 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x44040, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1410, 0x100, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) 20:24:59 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x200004) (async) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x200004) 20:24:59 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000000), 0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') (async) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000000), 0x4) (async) 20:24:59 executing program 0: membarrier(0x8, 0x0) r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f0000000040)) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') 20:24:59 executing program 1: sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001214000128bd700ffbdbdf2508000100000000000800150001800000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4004050) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x100}, 0x4048001) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000980)={0x4c, 0x1407, 0x20, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x1412, 0x100, 0x70bd27, 0x25dfdbfa}, 0x10}, 0x1, 0x0, 0x0, 0x80d2}, 0xc0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000280)={0xffffffffffffffff}, 0x1, {0xa, 0x4e21, 0x81, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000300)={0x11, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f00000006c0)={0x2, 0x80000000}) (async) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x4000800) (async) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x53dd02, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000400)={0x10, 0x30, 0xfa00, {&(0x7f00000003c0)={0xffffffffffffffff}, 0x2, {0xa, 0x4e24, 0x0, @remote, 0xff}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, &(0x7f0000000440)={0x11, 0x10, 0xfa00, {&(0x7f0000000380), r6}}, 0x18) 20:24:59 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x141041, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x400, 0x0, 0xff, 0x6be}, {0x3, 0x5, 0x7, 0x6}, {0x1f, 0x7f, 0x9, 0x3}, {0x7, 0x9, 0x6, 0xfdff}, {0x6912, 0x0, 0x80, 0x7}]}) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:59 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x44040, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1410, 0x100, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x44040, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1410, 0x100, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) (async) 20:24:59 executing program 0: membarrier(0x8, 0x0) (async) r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f0000000040)) (async) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') 20:24:59 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x800) 20:24:59 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000000), 0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') (async) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000000), 0x4) (async) 20:24:59 executing program 1: ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x9, 0xf31c, {0x0}, {0xee00}, 0x7, 0x5}) syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/time_for_children\x00') r1 = syz_open_dev$dri(&(0x7f0000000100), 0xe7, 0x2e0542) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000000c0)) 20:24:59 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x181c01, 0x0) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000040)) 20:24:59 executing program 0: membarrier(0x8, 0x0) r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f0000000040)) (async) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') 20:24:59 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x800) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') (async) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x800) (async) 20:24:59 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x141041, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x400, 0x0, 0xff, 0x6be}, {0x3, 0x5, 0x7, 0x6}, {0x1f, 0x7f, 0x9, 0x3}, {0x7, 0x9, 0x6, 0xfdff}, {0x6912, 0x0, 0x80, 0x7}]}) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:59 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00') 20:24:59 executing program 0: r0 = getpid() r1 = socket$phonet_pipe(0x23, 0x5, 0x2) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/clear_refs\x00', 0x1, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/net\x00') 20:24:59 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x181c01, 0x0) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000040)) 20:24:59 executing program 1: ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x9, 0xf31c, {0x0}, {0xee00}, 0x7, 0x5}) syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/time_for_children\x00') r1 = syz_open_dev$dri(&(0x7f0000000100), 0xe7, 0x2e0542) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x9, 0xf31c, {}, {0xee00}, 0x7, 0x5}) (async) syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/time_for_children\x00') (async) syz_open_dev$dri(&(0x7f0000000100), 0xe7, 0x2e0542) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000000c0)) (async) 20:24:59 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x800) 20:24:59 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00') 20:24:59 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x141041, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x400, 0x0, 0xff, 0x6be}, {0x3, 0x5, 0x7, 0x6}, {0x1f, 0x7f, 0x9, 0x3}, {0x7, 0x9, 0x6, 0xfdff}, {0x6912, 0x0, 0x80, 0x7}]}) (async) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x400, 0x0, 0xff, 0x6be}, {0x3, 0x5, 0x7, 0x6}, {0x1f, 0x7f, 0x9, 0x3}, {0x7, 0x9, 0x6, 0xfdff}, {0x6912, 0x0, 0x80, 0x7}]}) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:24:59 executing program 0: r0 = getpid() r1 = socket$phonet_pipe(0x23, 0x5, 0x2) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/clear_refs\x00', 0x1, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/net\x00') getpid() (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/clear_refs\x00', 0x1, 0x0) (async) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) (async) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/net\x00') (async) 20:24:59 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x181c01, 0x0) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000040)) 20:24:59 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r1, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004805}, 0x8084) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xffce}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_MRU={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x93) socket$packet(0x11, 0x766c863ede32ca3b, 0x300) write$nbd(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="674466980000000004000300030000006882966f9711371b93ef5d64192e61e769725085f4024288076cd56cb4e0250efad627fefb4cad8e6ad1e488f5d0f43a1fcc4c78248611956b6be7c76a3bd73297f7123745fd3a2a2e11b40e5743df80480d83dcc4b34015f303dc4009c4b44b348bedc9b6360eef42e1280c2bf20c41d20100cb011889b3077078fa689ff6702f6af5cc85bffc6dd8307cdac0eda7a655ee369a30541b13068b7fd6809e6d6894b143acc73a92d83df6ade77d82726c9ed2165ac010147ab290b5023446c82a"], 0xcd) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40402}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r5, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x448c1) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000700)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x20000010) 20:24:59 executing program 1: ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x9, 0xf31c, {0x0}, {0xee00}, 0x7, 0x5}) syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/time_for_children\x00') (async) r1 = syz_open_dev$dri(&(0x7f0000000100), 0xe7, 0x2e0542) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000000c0)) 20:24:59 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00') 20:24:59 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r1, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004805}, 0x8084) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xffce}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_MRU={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x93) (async) socket$packet(0x11, 0x766c863ede32ca3b, 0x300) (async) write$nbd(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="674466980000000004000300030000006882966f9711371b93ef5d64192e61e769725085f4024288076cd56cb4e0250efad627fefb4cad8e6ad1e488f5d0f43a1fcc4c78248611956b6be7c76a3bd73297f7123745fd3a2a2e11b40e5743df80480d83dcc4b34015f303dc4009c4b44b348bedc9b6360eef42e1280c2bf20c41d20100cb011889b3077078fa689ff6702f6af5cc85bffc6dd8307cdac0eda7a655ee369a30541b13068b7fd6809e6d6894b143acc73a92d83df6ade77d82726c9ed2165ac010147ab290b5023446c82a"], 0xcd) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) (rerun: 64) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40402}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r5, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x448c1) (async) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000700)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x20000010) 20:24:59 executing program 0: r0 = getpid() r1 = socket$phonet_pipe(0x23, 0x5, 0x2) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/clear_refs\x00', 0x1, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/net\x00') getpid() (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/clear_refs\x00', 0x1, 0x0) (async) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) (async) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/net\x00') (async) 20:24:59 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) getpid() 20:24:59 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2100020}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x1402, 0x100, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20004001) r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="1000000001140000000000000000000015d9f7671038c4888455c89557b2de7b100721118c86451a49a61e8a4ea15a08df809980d6cb6418e3ada4ea0c0cf160e3ae547a1cb4813012210ec5acca273ad8c97bb8688c13960598e73ecdf216ae67dbbbeac84bfd685b56ead3cabca4dec1ef1037229d6ca1cc0f1fc6ed439b9ea59677944f542987"], 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1407, 0x200, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000008}, 0x4000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000002096b6f500f6784c5e00080019000000000008006c790242a6090000000000"], 0x24}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_I_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40840) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, 0x140b, 0x400, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x140e, 0x100, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x454}, 0x8000) 20:24:59 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f00000001c0)) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x7) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x1, 0x64, 0x6, 0x6}, {0x4, 0x0, 0xff, 0x7}, {0x20, 0x5, 0x5, 0x7}, {0x9, 0xb1, 0x0, 0x7}, {0x5, 0x66, 0x5, 0x3}, {0xa6f, 0x0, 0xfe, 0xfff}, {0x8000, 0x3, 0x1, 0xc31a}]}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000200), 0x385002, 0x0) ioctl$VFIO_GET_API_VERSION(r2, 0x3b64) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x3460, 0x9, 0x7, 0x9}]}) 20:24:59 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x682d03, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000080)=0x4) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x30b600, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000040)=0x7) 20:24:59 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080)={0x23, 0x1, 0xe2, 0x4}, 0x10) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', r3, 0x4, 0x1, 0x9, 0xfff, 0x63, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x20, 0x0, 0xf2b9, 0xffffef73}}) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="d63f74d1000000004786508c74e242af047f22df79c8af7f392b10314580c110925157ba8995de10cf120b23e8df194948f44bdeb6c0edea9707bbd9da552ac789490559ab56ccef17cabfbc338185c21969f2dcbca26e8154800f4cd80ea40d2aefc4970cf9747f4fc1cfd3b05ee89c54edd8e3a91a9e039fd7ea2635207d24ff79645883991709e8413510daf809", @ANYRES16=r2, @ANYBLOB="000429bd7000ffdbdf25000000000200090001000000060006000400000008000100", @ANYRES32=r4, @ANYBLOB="0c00030003000000000000000600060003000000060006000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000800020000000600060000000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 20:24:59 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2100020}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x1402, 0x100, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20004001) r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="1000000001140000000000000000000015d9f7671038c4888455c89557b2de7b100721118c86451a49a61e8a4ea15a08df809980d6cb6418e3ada4ea0c0cf160e3ae547a1cb4813012210ec5acca273ad8c97bb8688c13960598e73ecdf216ae67dbbbeac84bfd685b56ead3cabca4dec1ef1037229d6ca1cc0f1fc6ed439b9ea59677944f542987"], 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1407, 0x200, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000008}, 0x4000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000002096b6f500f6784c5e00080019000000000008006c790242a6090000000000"], 0x24}}, 0x0) (async) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000002096b6f500f6784c5e00080019000000000008006c790242a6090000000000"], 0x24}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_I_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40840) (async) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_I_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40840) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, 0x140b, 0x400, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, 0x140b, 0x400, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x140e, 0x100, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x454}, 0x8000) 20:24:59 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async, rerun: 32) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (rerun: 32) getpid() 20:24:59 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x682d03, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000080)=0x4) (async, rerun: 64) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async, rerun: 64) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) (rerun: 64) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x30b600, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000040)=0x7) 20:24:59 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r1, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004805}, 0x8084) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xffce}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_MRU={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x93) (async) socket$packet(0x11, 0x766c863ede32ca3b, 0x300) (async) write$nbd(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="674466980000000004000300030000006882966f9711371b93ef5d64192e61e769725085f4024288076cd56cb4e0250efad627fefb4cad8e6ad1e488f5d0f43a1fcc4c78248611956b6be7c76a3bd73297f7123745fd3a2a2e11b40e5743df80480d83dcc4b34015f303dc4009c4b44b348bedc9b6360eef42e1280c2bf20c41d20100cb011889b3077078fa689ff6702f6af5cc85bffc6dd8307cdac0eda7a655ee369a30541b13068b7fd6809e6d6894b143acc73a92d83df6ade77d82726c9ed2165ac010147ab290b5023446c82a"], 0xcd) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40402}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r5, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x448c1) (async) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000700)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x20000010) 20:24:59 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f00000001c0)) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x7) (async, rerun: 64) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x1, 0x64, 0x6, 0x6}, {0x4, 0x0, 0xff, 0x7}, {0x20, 0x5, 0x5, 0x7}, {0x9, 0xb1, 0x0, 0x7}, {0x5, 0x66, 0x5, 0x3}, {0xa6f, 0x0, 0xfe, 0xfff}, {0x8000, 0x3, 0x1, 0xc31a}]}) (async, rerun: 64) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000200), 0x385002, 0x0) ioctl$VFIO_GET_API_VERSION(r2, 0x3b64) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') (async) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x3460, 0x9, 0x7, 0x9}]}) 20:24:59 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080)={0x23, 0x1, 0xe2, 0x4}, 0x10) (async, rerun: 64) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) (rerun: 32) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', r3, 0x4, 0x1, 0x9, 0xfff, 0x63, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x20, 0x0, 0xf2b9, 0xffffef73}}) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="d63f74d1000000004786508c74e242af047f22df79c8af7f392b10314580c110925157ba8995de10cf120b23e8df194948f44bdeb6c0edea9707bbd9da552ac789490559ab56ccef17cabfbc338185c21969f2dcbca26e8154800f4cd80ea40d2aefc4970cf9747f4fc1cfd3b05ee89c54edd8e3a91a9e039fd7ea2635207d24ff79645883991709e8413510daf809", @ANYRES16=r2, @ANYBLOB="000429bd7000ffdbdf25000000000200090001000000060006000400000008000100", @ANYRES32=r4, @ANYBLOB="0c00030003000000000000000600060003000000060006000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000800020000000600060000000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 20:24:59 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x682d03, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000080)=0x4) (async, rerun: 64) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (rerun: 64) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x30b600, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000040)=0x7) 20:24:59 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) getpid() 20:24:59 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2100020}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x1402, 0x100, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20004001) (async) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2100020}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x1402, 0x100, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20004001) r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="1000000001140000000000000000000015d9f7671038c4888455c89557b2de7b100721118c86451a49a61e8a4ea15a08df809980d6cb6418e3ada4ea0c0cf160e3ae547a1cb4813012210ec5acca273ad8c97bb8688c13960598e73ecdf216ae67dbbbeac84bfd685b56ead3cabca4dec1ef1037229d6ca1cc0f1fc6ed439b9ea59677944f542987"], 0x10}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="1000000001140000000000000000000015d9f7671038c4888455c89557b2de7b100721118c86451a49a61e8a4ea15a08df809980d6cb6418e3ada4ea0c0cf160e3ae547a1cb4813012210ec5acca273ad8c97bb8688c13960598e73ecdf216ae67dbbbeac84bfd685b56ead3cabca4dec1ef1037229d6ca1cc0f1fc6ed439b9ea59677944f542987"], 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1407, 0x200, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000008}, 0x4000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000002096b6f500f6784c5e00080019000000000008006c790242a6090000000000"], 0x24}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_I_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40840) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, 0x140b, 0x400, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, 0x140b, 0x400, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x140e, 0x100, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x454}, 0x8000) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x140e, 0x100, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x454}, 0x8000) 20:25:00 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') 20:25:00 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 64) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) (rerun: 64) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f00000001c0)) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)=0x7) (async) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x1, 0x64, 0x6, 0x6}, {0x4, 0x0, 0xff, 0x7}, {0x20, 0x5, 0x5, 0x7}, {0x9, 0xb1, 0x0, 0x7}, {0x5, 0x66, 0x5, 0x3}, {0xa6f, 0x0, 0xfe, 0xfff}, {0x8000, 0x3, 0x1, 0xc31a}]}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000200), 0x385002, 0x0) ioctl$VFIO_GET_API_VERSION(r2, 0x3b64) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') (async, rerun: 64) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x3460, 0x9, 0x7, 0x9}]}) (rerun: 64) 20:25:00 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000000)=0xe39c) 20:25:00 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x8, 0x49323159, 0x7, 0x401, 0x2, @stepwise={{0x7, 0xef6}, {0x101, 0x2}, {0x6d7, 0x7}}}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:25:00 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x84000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:25:00 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') 20:25:00 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x84000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) 20:25:00 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x8, 0x49323159, 0x7, 0x401, 0x2, @stepwise={{0x7, 0xef6}, {0x101, 0x2}, {0x6d7, 0x7}}}) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:25:00 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080)={0x23, 0x1, 0xe2, 0x4}, 0x10) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) (async) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', r3, 0x4, 0x1, 0x9, 0xfff, 0x63, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x20, 0x0, 0xf2b9, 0xffffef73}}) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="d63f74d1000000004786508c74e242af047f22df79c8af7f392b10314580c110925157ba8995de10cf120b23e8df194948f44bdeb6c0edea9707bbd9da552ac789490559ab56ccef17cabfbc338185c21969f2dcbca26e8154800f4cd80ea40d2aefc4970cf9747f4fc1cfd3b05ee89c54edd8e3a91a9e039fd7ea2635207d24ff79645883991709e8413510daf809", @ANYRES16=r2, @ANYBLOB="000429bd7000ffdbdf25000000000200090001000000060006000400000008000100", @ANYRES32=r4, @ANYBLOB="0c00030003000000000000000600060003000000060006000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000800020000000600060000000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 20:25:00 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') 20:25:00 executing program 5: ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000140)={0x70, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}]}}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x140a, 0x200, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1000000001140000"], 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x1410, 0x2, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:25:00 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x8, 0x49323159, 0x7, 0x401, 0x2, @stepwise={{0x7, 0xef6}, {0x101, 0x2}, {0x6d7, 0x7}}}) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 20:25:00 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5684800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200df0008000900000000000800090000000000"], 0x24}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r3, @ANYBLOB="100026bd7000fbdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x48011) write$vhost_msg(r0, &(0x7f0000001140)={0x1, {&(0x7f0000000080)=""/4096, 0x1000, &(0x7f0000001080)=""/179, 0x3, 0x3}}, 0x48) 20:25:00 executing program 1: prctl$PR_GET_FPEXC(0xb, &(0x7f0000000180)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x305000, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000714200f26bd7000fedbdf250900020073797a320f000000779a6bcef82009e342848471e55e4d896c4ea9b22e8b14b0c45c77766d4c3d9fae93aaa963ccd78f6c3824ae3337fb5aa0723d517d1ae354113f46c7a4a9737d03c2a3a1967685bdde0dbd9e40306a10cb8a326a329e7510c3f97e1a550400000000000000c7919e27319a253665b0d0bb1ba84d970e3875e6eff411332a83e15cc50bfb8105780d7538d6be0001000000000000a044ba599d0845bb198e7d5c5ce3eb8de32e57dbc331f3c78e73697adbf97d7947f4f15c3bda8ecf029b661225511d148eda27927f51aecc0900"/249], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 20:25:00 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000007c0)=0x3) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000000)=0xe39c) 20:25:00 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x84000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x84000, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000007c0)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)) (async) 20:25:00 executing program 2: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time\x00') clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) getpgid(r0) nanosleep(&(0x7f0000000080)={r1, r2+10000000}, &(0x7f00000000c0)) 20:25:00 executing program 5: ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000140)={0x70, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}]}}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x140a, 0x200, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) (async) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x140a, 0x200, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) socket$nl_rdma(0x10, 0x3, 0x14) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1000000001140000"], 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x1410, 0x2, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') [ 565.772531] kasan: CONFIG_KASAN_INLINE enabled [ 565.778157] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 565.817611] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 565.823873] Modules linked in: [ 565.827118] CPU: 0 PID: 22615 Comm: syz-executor.0 Not tainted 4.14.307-syzkaller #0 [ 565.834999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 565.844388] task: ffff88807ed9e280 task.stack: ffff888085b90000 [ 565.850489] RIP: 0010:vhost_chr_write_iter+0x873/0x1100 [ 565.855854] RSP: 0018:ffff888085b97c00 EFLAGS: 00010246 20:25:00 executing program 5: ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000140)={0x70, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}]}}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x140a, 0x200, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1000000001140000"], 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x1410, 0x2, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000140)={0x70, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}]}}) (async) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x140a, 0x200, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1000000001140000"], 0x10}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x1410, 0x2, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') (async) 20:25:00 executing program 5: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) r1 = getpgid(r0) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/cgroup\x00') [ 565.861223] RAX: dffffc0000000000 RBX: ffff88808740bac0 RCX: 0000000000000000 [ 565.868502] RDX: 0000000000000002 RSI: ffffffff857f16f5 RDI: ffff88808740bb80 [ 565.875792] RBP: ffffed1010e81769 R08: 0000000000000000 R09: 000000000004069e [ 565.883075] R10: ffff88807ed9eb58 R11: ffff88807ed9e280 R12: 0000000000000002 [ 565.890353] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff11010b72f87 [ 565.897630] FS: 00007f6111796700(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 [ 565.905858] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 20:25:00 executing program 5: getpgid(0x0) (async) r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) r1 = getpgid(r0) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/cgroup\x00') 20:25:00 executing program 5: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000ac0)) (async) r1 = getpgid(r0) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/cgroup\x00') 20:25:00 executing program 5: ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000280)={@empty, @empty, 0xe, 0xa}}) r0 = getpgid(0x0) r1 = getpgid(r0) getpgid(r1) sched_rr_get_interval(r1, &(0x7f0000000ac0)) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/ipc\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x40403, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r2, 0x20, &(0x7f0000000200)={&(0x7f0000000080)=""/103, 0x67, 0x0, &(0x7f0000000100)=""/241, 0xf1}}, 0x10) [ 565.911743] CR2: 00007ffd82b80f78 CR3: 000000008faad000 CR4: 00000000003406f0 [ 565.919024] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 565.926394] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 565.933662] Call Trace: [ 565.936277] ? log_write_hva+0x310/0x310 [ 565.940368] ? lock_acquire+0x170/0x3f0 [ 565.944340] ? lock_downgrade+0x740/0x740 [ 565.948493] ? iov_iter_init+0xa6/0x1c0 [ 565.952486] __vfs_write+0x44c/0x630 [ 565.956226] ? kernel_read+0x110/0x110 [ 565.960144] ? rw_verify_area+0xe1/0x2a0 [ 565.964213] vfs_write+0x17f/0x4d0 20:25:00 executing program 5: ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000280)={@empty, @empty, 0xe, 0xa}}) r0 = getpgid(0x0) r1 = getpgid(r0) getpgid(r1) (async) getpgid(r1) sched_rr_get_interval(r1, &(0x7f0000000ac0)) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/ipc\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x40403, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r2, 0x20, &(0x7f0000000200)={&(0x7f0000000080)=""/103, 0x67, 0x0, &(0x7f0000000100)=""/241, 0xf1}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r2, 0x20, &(0x7f0000000200)={&(0x7f0000000080)=""/103, 0x67, 0x0, &(0x7f0000000100)=""/241, 0xf1}}, 0x10) [ 565.967797] SyS_write+0xf2/0x210 [ 565.971266] ? SyS_read+0x210/0x210 [ 565.974913] ? do_syscall_64+0x4c/0x640 [ 565.978895] ? SyS_read+0x210/0x210 [ 565.982549] do_syscall_64+0x1d5/0x640 [ 565.986450] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 565.991642] RIP: 0033:0x7f61132240f9 [ 565.995353] RSP: 002b:00007f6111796168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 566.003068] RAX: ffffffffffffffda RBX: 00007f6113343f80 RCX: 00007f61132240f9 [ 566.010354] RDX: 0000000000000048 RSI: 0000000020001140 RDI: 0000000000000003 [ 566.017614] RBP: 00007f611327fae9 R08: 0000000000000000 R09: 0000000000000000 [ 566.024874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.032133] R13: 00007ffc5069065f R14: 00007f6111796300 R15: 0000000000022000 [ 566.039395] Code: ff df 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 c6 06 00 00 4c 8b ab c0 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e9 48 c1 e9 03 <80> 3c 01 00 0f 85 8f 06 00 00 49 8b 6d 00 48 85 ed 0f 84 e4 03 [ 566.058567] RIP: vhost_chr_write_iter+0x873/0x1100 RSP: ffff888085b97c00 [ 566.072731] ---[ end trace 8cf1573cf040a078 ]--- [ 566.077633] Kernel panic - not syncing: Fatal exception [ 566.083278] Kernel Offset: disabled [ 566.086898] Rebooting in 86400 seconds..