6764a308d766480a0f045f696e697472635f657865635f743a7330000014020300ff0100005460d8c275b53a5404a4698b6fcd00000000000114000600767863616e3100"/155], 0x80}, 0x1, 0x0, 0x0, 0x45}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:init_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40005) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4860401c}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, r3, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x50}, 0x1, 0x0, 0x0, 0x200000c0}, 0x1) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2e}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000000) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000feffffffff00000008000500fffffffefb000400040000003e96a0ae302eef4141df234b"], 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 09:40:25 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x0, 0x0, 0x1}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:25 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x105200) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f00000003c0)) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000480)={0x3, 0x9}) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000440)) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000700)=ANY=[@ANYBLOB="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"]) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f00000004c0)) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f00000002c0)) socketpair(0x23, 0x0, 0x100000, 0x0) socketpair(0xf, 0x4, 0x1, &(0x7f0000000000)) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000400)) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x105200) (async) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) (async) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f00000003c0)) (async) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000480)={0x3, 0x9}) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) (async) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000440)) (async) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000700)=ANY=[@ANYBLOB="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"]) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) (async) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f00000004c0)) (async) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f00000002c0)) (async) socketpair(0x23, 0x0, 0x100000, 0x0) (async) socketpair(0xf, 0x4, 0x1, &(0x7f0000000000)) (async) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000400)) (async) 09:40:25 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:25 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x6000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x3, 0x8) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f00000000c0)={0x7fffffff, 0xbe}) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000140)) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) 09:40:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000040)=0x4, 0x4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) (rerun: 64) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000040)=0x4, 0x4) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:25 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x4200) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x8, 0x80, 0x9, 0x7f, 0x3], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f0000000300)='tasks\x00', 0x2, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:25 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000000)=0x3, 0x4) 09:40:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000040)=0x4, 0x4) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:25 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x105200) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f00000003c0)) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000480)={0x3, 0x9}) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000440)) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000700)=ANY=[@ANYBLOB="00000000000000000800000000000000ffffff7f0000000048e00000000000001f0000000000000009c0d00800000000ac010000000000000000000000000000000000000000000000000000000000004000fc4e665f00000000000005000000000000000010000000000000000901800000000001000000e9f70351b9e7ddba00000000d12a3af5ae144b8000000000000000000700000000000000090000000000000001040000000000001ffcdb0200000000010400000000000000000000000000000000000000000000000000000000000006000000000000000700000000000000000000000000000003400200000000000000000000000000000000000000000000000000000000000000000000000000360d0000000000000500000000000000fdffffffffffffff03024004000000000500000000000000000000000000000000000000000000000000000000000000ff0f0000000000000300000000000000ffffffffffffffff02004d3f00000000ff7f0000000000000000000000000000000000000000000000000b1a00000000b15b000000000000ffffffffffffffff13df0c77000000003f020740000000040000000000000000000000000000000000000000000000000000000000000005000000000000000400000000000000010000000100000001ff7fa7000000001f00000000000000000000000000000000000000000000000000000000000000f892d9f7f53b30953277f1417a2e8573c29cbd5c8a655dfa889b0bf84f56b34bca6dd945741bd1996a2ee570a594eeccc7605db2535e7bdba47c2faf7278dfaadcb6bee40530b7eee611025152ce9c346f959972f43cf3e5096ebb11d2b7e61acbfaa2f81b1ac11c2d87e5d9b24982358d450537d356537a690690d3d9dfa4c452aa8390c241ac581a97c7ddc651af5f18f7d78b8adbaa61764dd9776865b38eedb3eb770e3631d91a2616677095f6e012fd3a5ace8a0b3f130e38f3395ca81b79f00c59fc7c6105f33e91c456912fc780e9a2523daa7299ff2cdb"]) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f00000004c0)) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f00000002c0)) socketpair(0x23, 0x0, 0x100000, 0x0) socketpair(0xf, 0x4, 0x1, &(0x7f0000000000)) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000400)) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x105200) (async) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) (async) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f00000003c0)) (async) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000480)={0x3, 0x9}) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) (async) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000440)) (async) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000700)=ANY=[@ANYBLOB="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"]) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) (async) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f00000004c0)) (async) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f00000002c0)) (async) socketpair(0x23, 0x0, 0x100000, 0x0) (async) socketpair(0xf, 0x4, 0x1, &(0x7f0000000000)) (async) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000400)) (async) 09:40:25 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:25 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x4200) (rerun: 64) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x8, 0x80, 0x9, 0x7f, 0x3], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f0000000300)='tasks\x00', 0x2, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:25 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x220000, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000180)) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000080)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008081}, 0x4000010) 09:40:25 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async, rerun: 32) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000000)=0x3, 0x4) 09:40:25 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:25 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x6000) (async) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x3, 0x8) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) (async) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f00000000c0)={0x7fffffff, 0xbe}) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000140)) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) 09:40:25 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x8001, 0x5, 0x1e, 0x15, "0007a2ff669054300ed65c19107b6d75a2e177d83237ff34d1536c38460a43aece43d6dafc854a46c1f324e30281951196207486ba2f87e5abd563256f3baba8", "7b83ae4df898629c7ff4691b457d536a27499d40f8c42cd0c5d293fc0d172154", [0x81, 0x8001]}) socketpair(0x23, 0x0, 0x100000, 0x0) 09:40:25 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x220000, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000180)) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000080)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008081}, 0x4000010) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x220000, 0x0) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) (async) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000180)) (async) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000080)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008081}, 0x4000010) (async) 09:40:25 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x4200) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x8, 0x80, 0x9, 0x7f, 0x3], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f0000000300)='tasks\x00', 0x2, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x4200) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x8, 0x80, 0x9, 0x7f, 0x3], 0x5, 0x80800}) (async) openat$cgroup_procs(r2, &(0x7f0000000300)='tasks\x00', 0x2, 0x0) (async) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) (async) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) (async) 09:40:25 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000000)=0x3, 0x4) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000000)=0x3, 0x4) (async) 09:40:25 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x220000, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000180)) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000080)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008081}, 0x4000010) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x220000, 0x0) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) (async) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000180)) (async) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000080)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008081}, 0x4000010) (async) 09:40:25 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(0x0, 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:25 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000000)={0x7, 0x9, 0xb, 0xffffffff, 0x3, 0x0, 0x10000001}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xc4, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000140)) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:25 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(0x0, 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:25 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000080)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x4090}, 0x20000010) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:25 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x8001, 0x5, 0x1e, 0x15, "0007a2ff669054300ed65c19107b6d75a2e177d83237ff34d1536c38460a43aece43d6dafc854a46c1f324e30281951196207486ba2f87e5abd563256f3baba8", "7b83ae4df898629c7ff4691b457d536a27499d40f8c42cd0c5d293fc0d172154", [0x81, 0x8001]}) (async) socketpair(0x23, 0x0, 0x100000, 0x0) 09:40:25 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r2, &(0x7f0000000000)="3adf5a8ecfc4240992cc935aaf07dad360a2a5547ece555e564ced6f23f616", 0x1f, 0x4000000, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x10, 0x8000, 0x200, 0x8000, {{0x18, 0x4, 0x1, 0x4, 0x60, 0x66, 0x0, 0x24, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x44}, {[@timestamp={0x44, 0x8, 0xb, 0x0, 0x8, [0xfffffffe]}, @timestamp_addr={0x44, 0x44, 0x2f, 0x1, 0xc, [{@remote, 0xc59f}, {@rand_addr=0x64010100, 0x525}, {@multicast1, 0x6}, {@multicast2, 0xff5}, {@private=0xa010100, 0x7}, {@empty, 0x80}, {@broadcast, 0xffff}, {@loopback, 0x1}]}]}}}}}) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:25 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x6000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x3, 0x8) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f00000000c0)={0x7fffffff, 0xbe}) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000140)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) 09:40:25 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000000)={0x7, 0x9, 0xb, 0xffffffff, 0x3, 0x0, 0x10000001}) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xc4, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000140)) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) (async) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:25 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(0x0, 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:25 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000000)) pkey_free(0xffffffffffffffff) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) socketpair(0x1f, 0x800, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = accept$netrom(r4, &(0x7f0000000340)={{0x3, @default}, [@netrom, @null, @remote, @bcast, @netrom, @default, @rose]}, &(0x7f00000003c0)=0x48) connect$netrom(r5, &(0x7f0000000400)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x4}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x48) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000180)={0x4, 0x1, 0x0, [{0x950e, 0x80000001, 0x5, 0x1, 0x8, 0x20, 0x9, '\x00', 0x4}]}) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f0000000480)) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0xffffffffffffffff) r6 = syz_open_dev$usbmon(&(0x7f0000000200), 0x7ff, 0x121000) read$usbmon(r6, &(0x7f0000000240)=""/201, 0xc9) accept4$x25(r3, &(0x7f00000000c0), &(0x7f0000000140)=0x12, 0x80800) 09:40:25 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:25 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000080)) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x4090}, 0x20000010) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:25 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r2, &(0x7f0000000000)="3adf5a8ecfc4240992cc935aaf07dad360a2a5547ece555e564ced6f23f616", 0x1f, 0x4000000, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x10, 0x8000, 0x200, 0x8000, {{0x18, 0x4, 0x1, 0x4, 0x60, 0x66, 0x0, 0x24, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x44}, {[@timestamp={0x44, 0x8, 0xb, 0x0, 0x8, [0xfffffffe]}, @timestamp_addr={0x44, 0x44, 0x2f, 0x1, 0xc, [{@remote, 0xc59f}, {@rand_addr=0x64010100, 0x525}, {@multicast1, 0x6}, {@multicast2, 0xff5}, {@private=0xa010100, 0x7}, {@empty, 0x80}, {@broadcast, 0xffff}, {@loopback, 0x1}]}]}}}}}) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) sendto$netrom(r2, &(0x7f0000000000)="3adf5a8ecfc4240992cc935aaf07dad360a2a5547ece555e564ced6f23f616", 0x1f, 0x4000000, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x10, 0x8000, 0x200, 0x8000, {{0x18, 0x4, 0x1, 0x4, 0x60, 0x66, 0x0, 0x24, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x44}, {[@timestamp={0x44, 0x8, 0xb, 0x0, 0x8, [0xfffffffe]}, @timestamp_addr={0x44, 0x44, 0x2f, 0x1, 0xc, [{@remote, 0xc59f}, {@rand_addr=0x64010100, 0x525}, {@multicast1, 0x6}, {@multicast2, 0xff5}, {@private=0xa010100, 0x7}, {@empty, 0x80}, {@broadcast, 0xffff}, {@loopback, 0x1}]}]}}}}}) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 09:40:25 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) (async) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x8001, 0x5, 0x1e, 0x15, "0007a2ff669054300ed65c19107b6d75a2e177d83237ff34d1536c38460a43aece43d6dafc854a46c1f324e30281951196207486ba2f87e5abd563256f3baba8", "7b83ae4df898629c7ff4691b457d536a27499d40f8c42cd0c5d293fc0d172154", [0x81, 0x8001]}) (async) socketpair(0x23, 0x0, 0x100000, 0x0) 09:40:25 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000000)={0x7, 0x9, 0xb, 0xffffffff, 0x3, 0x0, 0x10000001}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xc4, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000140)) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000000)={0x7, 0x9, 0xb, 0xffffffff, 0x3, 0x0, 0x10000001}) (async) syz_open_dev$loop(&(0x7f0000000100), 0xc4, 0x0) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000140)) (async) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) 09:40:26 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000080)) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x4090}, 0x20000010) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:26 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) socketpair(0x23, 0x0, 0x100000, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 09:40:26 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:26 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x700, 0x40, 0xb04, 0x36c8, {{0x16, 0x4, 0x3, 0x1c, 0x58, 0x67, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x20, 0x23, 0x0, 0x8, [0x7ff, 0x81, 0x3, 0x0, 0xfff, 0x80, 0x9]}, @timestamp={0x44, 0xc, 0xda, 0x0, 0x3, [0x80, 0x7]}, @timestamp={0x44, 0x18, 0x1a, 0x0, 0x0, [0x0, 0x1, 0x10001, 0xfffff000, 0xb995]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000140)={'ip_vti0\x00', r2, 0x7, 0x700, 0x3, 0x1, {{0x1c, 0x4, 0x1, 0x4, 0x70, 0x68, 0x0, 0x3, 0x29, 0x0, @multicast2, @loopback, {[@lsrr={0x83, 0x17, 0xa8, [@multicast1, @dev={0xac, 0x14, 0x14, 0x40}, @rand_addr=0x64010102, @local, @rand_addr=0x64010102]}, @cipso={0x86, 0x2c, 0x3, [{0x7, 0x4, "dd9d"}, {0x7, 0x4, "ef90"}, {0x0, 0x2}, {0x0, 0xf, "0efc46addea18703ff03351d62"}, {0x6, 0xd, "529df2690d0a28bc1cb754"}]}, @noop, @end, @lsrr={0x83, 0x17, 0x31, [@multicast2, @local, @loopback, @local, @broadcast]}]}}}}}) 09:40:26 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x700, 0x40, 0xb04, 0x36c8, {{0x16, 0x4, 0x3, 0x1c, 0x58, 0x67, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x20, 0x23, 0x0, 0x8, [0x7ff, 0x81, 0x3, 0x0, 0xfff, 0x80, 0x9]}, @timestamp={0x44, 0xc, 0xda, 0x0, 0x3, [0x80, 0x7]}, @timestamp={0x44, 0x18, 0x1a, 0x0, 0x0, [0x0, 0x1, 0x10001, 0xfffff000, 0xb995]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000140)={'ip_vti0\x00', r2, 0x7, 0x700, 0x3, 0x1, {{0x1c, 0x4, 0x1, 0x4, 0x70, 0x68, 0x0, 0x3, 0x29, 0x0, @multicast2, @loopback, {[@lsrr={0x83, 0x17, 0xa8, [@multicast1, @dev={0xac, 0x14, 0x14, 0x40}, @rand_addr=0x64010102, @local, @rand_addr=0x64010102]}, @cipso={0x86, 0x2c, 0x3, [{0x7, 0x4, "dd9d"}, {0x7, 0x4, "ef90"}, {0x0, 0x2}, {0x0, 0xf, "0efc46addea18703ff03351d62"}, {0x6, 0xd, "529df2690d0a28bc1cb754"}]}, @noop, @end, @lsrr={0x83, 0x17, 0x31, [@multicast2, @local, @loopback, @local, @broadcast]}]}}}}}) 09:40:26 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r2, &(0x7f0000000000)="3adf5a8ecfc4240992cc935aaf07dad360a2a5547ece555e564ced6f23f616", 0x1f, 0x4000000, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x10, 0x8000, 0x200, 0x8000, {{0x18, 0x4, 0x1, 0x4, 0x60, 0x66, 0x0, 0x24, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x44}, {[@timestamp={0x44, 0x8, 0xb, 0x0, 0x8, [0xfffffffe]}, @timestamp_addr={0x44, 0x44, 0x2f, 0x1, 0xc, [{@remote, 0xc59f}, {@rand_addr=0x64010100, 0x525}, {@multicast1, 0x6}, {@multicast2, 0xff5}, {@private=0xa010100, 0x7}, {@empty, 0x80}, {@broadcast, 0xffff}, {@loopback, 0x1}]}]}}}}}) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) sendto$netrom(r2, &(0x7f0000000000)="3adf5a8ecfc4240992cc935aaf07dad360a2a5547ece555e564ced6f23f616", 0x1f, 0x4000000, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x10, 0x8000, 0x200, 0x8000, {{0x18, 0x4, 0x1, 0x4, 0x60, 0x66, 0x0, 0x24, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x44}, {[@timestamp={0x44, 0x8, 0xb, 0x0, 0x8, [0xfffffffe]}, @timestamp_addr={0x44, 0x44, 0x2f, 0x1, 0xc, [{@remote, 0xc59f}, {@rand_addr=0x64010100, 0x525}, {@multicast1, 0x6}, {@multicast2, 0xff5}, {@private=0xa010100, 0x7}, {@empty, 0x80}, {@broadcast, 0xffff}, {@loopback, 0x1}]}]}}}}}) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 09:40:26 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000000)) pkey_free(0xffffffffffffffff) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) socketpair(0x1f, 0x800, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = accept$netrom(r4, &(0x7f0000000340)={{0x3, @default}, [@netrom, @null, @remote, @bcast, @netrom, @default, @rose]}, &(0x7f00000003c0)=0x48) connect$netrom(r5, &(0x7f0000000400)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x4}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x48) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000180)={0x4, 0x1, 0x0, [{0x950e, 0x80000001, 0x5, 0x1, 0x8, 0x20, 0x9, '\x00', 0x4}]}) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f0000000480)) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0xffffffffffffffff) r6 = syz_open_dev$usbmon(&(0x7f0000000200), 0x7ff, 0x121000) read$usbmon(r6, &(0x7f0000000240)=""/201, 0xc9) accept4$x25(r3, &(0x7f00000000c0), &(0x7f0000000140)=0x12, 0x80800) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) (async) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000000)) (async) pkey_free(0xffffffffffffffff) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) (async) socketpair(0x1f, 0x800, 0x7, &(0x7f0000000040)) (async) accept$netrom(r4, &(0x7f0000000340)={{0x3, @default}, [@netrom, @null, @remote, @bcast, @netrom, @default, @rose]}, &(0x7f00000003c0)=0x48) (async) connect$netrom(r5, &(0x7f0000000400)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x4}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x48) (async) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000180)={0x4, 0x1, 0x0, [{0x950e, 0x80000001, 0x5, 0x1, 0x8, 0x20, 0x9, '\x00', 0x4}]}) (async) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f0000000480)) (async) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0xffffffffffffffff) (async) syz_open_dev$usbmon(&(0x7f0000000200), 0x7ff, 0x121000) (async) read$usbmon(r6, &(0x7f0000000240)=""/201, 0xc9) (async) accept4$x25(r3, &(0x7f00000000c0), &(0x7f0000000140)=0x12, 0x80800) (async) 09:40:26 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000380)) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x3371], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000003812f57be09091b0c4edf74df167b48115af3c3fb56985280e61a6655d272e792008b079463ca1199f29f9b9d15d63e7d094e5785e3e12f5c9f09eaadf4a611da366b0331492e75a1e16e0f2ff9144a300b15a59c2664188c5a437227549620507be7d2d6403b13bd2efbbbf76e268db7cdfcbacb4468f94a7ff5102995af35354a003e568534a992b18c5e252a04f2ae64d916fe6584c7876b3990061cb349365f5d202ea49e7a5d210207796e1beb432a4ca85d7c24af7c393dc5e5491373ed05fa1346719f246d7c243f025dd862447d57c3163662afe32b6946416e0602c8184b6b987396b39000000084eb2d92476b8e977ea7f6ca733b6430c82bb0afe21c89e87bdc9b0f6d1aafc7f78fe12f7b43d554750bafb9df219f3f79986e90534cc989d919466eb0b7691c8803201c035045d6cc64e2616104bdf57423fe23b34"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="7205f0bf", @ANYRES16=0x0, @ANYBLOB="200028bd7000fedbdf25070000002900070073797374656d5f753a6f626a6563745f723a75736572696f5f6465766963655f743a73300000000014000200fe8000000000000000000000000000aa0500010000000000080005007f00000108000500ac141425140002000000000000000000000000000000000008000400ac1414aa"], 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 09:40:26 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:26 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f00000000c0)='/dev/loop#\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x81, 0x701000) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:26 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x700, 0x40, 0xb04, 0x36c8, {{0x16, 0x4, 0x3, 0x1c, 0x58, 0x67, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x20, 0x23, 0x0, 0x8, [0x7ff, 0x81, 0x3, 0x0, 0xfff, 0x80, 0x9]}, @timestamp={0x44, 0xc, 0xda, 0x0, 0x3, [0x80, 0x7]}, @timestamp={0x44, 0x18, 0x1a, 0x0, 0x0, [0x0, 0x1, 0x10001, 0xfffff000, 0xb995]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000140)={'ip_vti0\x00', r2, 0x7, 0x700, 0x3, 0x1, {{0x1c, 0x4, 0x1, 0x4, 0x70, 0x68, 0x0, 0x3, 0x29, 0x0, @multicast2, @loopback, {[@lsrr={0x83, 0x17, 0xa8, [@multicast1, @dev={0xac, 0x14, 0x14, 0x40}, @rand_addr=0x64010102, @local, @rand_addr=0x64010102]}, @cipso={0x86, 0x2c, 0x3, [{0x7, 0x4, "dd9d"}, {0x7, 0x4, "ef90"}, {0x0, 0x2}, {0x0, 0xf, "0efc46addea18703ff03351d62"}, {0x6, 0xd, "529df2690d0a28bc1cb754"}]}, @noop, @end, @lsrr={0x83, 0x17, 0x31, [@multicast2, @local, @loopback, @local, @broadcast]}]}}}}}) socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x700, 0x40, 0xb04, 0x36c8, {{0x16, 0x4, 0x3, 0x1c, 0x58, 0x67, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x20, 0x23, 0x0, 0x8, [0x7ff, 0x81, 0x3, 0x0, 0xfff, 0x80, 0x9]}, @timestamp={0x44, 0xc, 0xda, 0x0, 0x3, [0x80, 0x7]}, @timestamp={0x44, 0x18, 0x1a, 0x0, 0x0, [0x0, 0x1, 0x10001, 0xfffff000, 0xb995]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000140)={'ip_vti0\x00', r2, 0x7, 0x700, 0x3, 0x1, {{0x1c, 0x4, 0x1, 0x4, 0x70, 0x68, 0x0, 0x3, 0x29, 0x0, @multicast2, @loopback, {[@lsrr={0x83, 0x17, 0xa8, [@multicast1, @dev={0xac, 0x14, 0x14, 0x40}, @rand_addr=0x64010102, @local, @rand_addr=0x64010102]}, @cipso={0x86, 0x2c, 0x3, [{0x7, 0x4, "dd9d"}, {0x7, 0x4, "ef90"}, {0x0, 0x2}, {0x0, 0xf, "0efc46addea18703ff03351d62"}, {0x6, 0xd, "529df2690d0a28bc1cb754"}]}, @noop, @end, @lsrr={0x83, 0x17, 0x31, [@multicast2, @local, @loopback, @local, @broadcast]}]}}}}}) (async) 09:40:26 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) (async) socketpair(0x23, 0x0, 0x100000, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) 09:40:26 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(0x0, 0x3, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:26 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000380)) (async) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x3371], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000003812f57be09091b0c4edf74df167b48115af3c3fb56985280e61a6655d272e792008b079463ca1199f29f9b9d15d63e7d094e5785e3e12f5c9f09eaadf4a611da366b0331492e75a1e16e0f2ff9144a300b15a59c2664188c5a437227549620507be7d2d6403b13bd2efbbbf76e268db7cdfcbacb4468f94a7ff5102995af35354a003e568534a992b18c5e252a04f2ae64d916fe6584c7876b3990061cb349365f5d202ea49e7a5d210207796e1beb432a4ca85d7c24af7c393dc5e5491373ed05fa1346719f246d7c243f025dd862447d57c3163662afe32b6946416e0602c8184b6b987396b39000000084eb2d92476b8e977ea7f6ca733b6430c82bb0afe21c89e87bdc9b0f6d1aafc7f78fe12f7b43d554750bafb9df219f3f79986e90534cc989d919466eb0b7691c8803201c035045d6cc64e2616104bdf57423fe23b34"], 0x14}}, 0x0) (async, rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) (async, rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="7205f0bf", @ANYRES16=0x0, @ANYBLOB="200028bd7000fedbdf25070000002900070073797374656d5f753a6f626a6563745f723a75736572696f5f6465766963655f743a73300000000014000200fe8000000000000000000000000000aa0500010000000000080005007f00000108000500ac141425140002000000000000000000000000000000000008000400ac1414aa"], 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 09:40:26 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f00000000c0)='/dev/loop#\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x81, 0x701000) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:26 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) (async) socketpair(0x23, 0x0, 0x100000, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 09:40:26 executing program 5: ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@null, 0x2, 'bond0\x00'}) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:26 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(0x0, 0x3, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:27 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000000)) pkey_free(0xffffffffffffffff) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) socketpair(0x1f, 0x800, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = accept$netrom(r4, &(0x7f0000000340)={{0x3, @default}, [@netrom, @null, @remote, @bcast, @netrom, @default, @rose]}, &(0x7f00000003c0)=0x48) connect$netrom(r5, &(0x7f0000000400)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x4}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x48) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000180)={0x4, 0x1, 0x0, [{0x950e, 0x80000001, 0x5, 0x1, 0x8, 0x20, 0x9, '\x00', 0x4}]}) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f0000000480)) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0xffffffffffffffff) r6 = syz_open_dev$usbmon(&(0x7f0000000200), 0x7ff, 0x121000) read$usbmon(r6, &(0x7f0000000240)=""/201, 0xc9) accept4$x25(r3, &(0x7f00000000c0), &(0x7f0000000140)=0x12, 0x80800) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) (async) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000000)) (async) pkey_free(0xffffffffffffffff) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) (async) socketpair(0x1f, 0x800, 0x7, &(0x7f0000000040)) (async) accept$netrom(r4, &(0x7f0000000340)={{0x3, @default}, [@netrom, @null, @remote, @bcast, @netrom, @default, @rose]}, &(0x7f00000003c0)=0x48) (async) connect$netrom(r5, &(0x7f0000000400)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x4}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x48) (async) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000180)={0x4, 0x1, 0x0, [{0x950e, 0x80000001, 0x5, 0x1, 0x8, 0x20, 0x9, '\x00', 0x4}]}) (async) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f0000000480)) (async) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0xffffffffffffffff) (async) syz_open_dev$usbmon(&(0x7f0000000200), 0x7ff, 0x121000) (async) read$usbmon(r6, &(0x7f0000000240)=""/201, 0xc9) (async) accept4$x25(r3, &(0x7f00000000c0), &(0x7f0000000140)=0x12, 0x80800) (async) 09:40:27 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (rerun: 64) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f00000000c0)='/dev/loop#\x00') (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x81, 0x701000) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:27 executing program 0: socketpair(0x15, 0x5, 0x5, 0x0) 09:40:27 executing program 5: ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@null, 0x2, 'bond0\x00'}) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@null, 0x2, 'bond0\x00'}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) 09:40:27 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000380)) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x3371], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000003812f57be09091b0c4edf74df167b48115af3c3fb56985280e61a6655d272e792008b079463ca1199f29f9b9d15d63e7d094e5785e3e12f5c9f09eaadf4a611da366b0331492e75a1e16e0f2ff9144a300b15a59c2664188c5a437227549620507be7d2d6403b13bd2efbbbf76e268db7cdfcbacb4468f94a7ff5102995af35354a003e568534a992b18c5e252a04f2ae64d916fe6584c7876b3990061cb349365f5d202ea49e7a5d210207796e1beb432a4ca85d7c24af7c393dc5e5491373ed05fa1346719f246d7c243f025dd862447d57c3163662afe32b6946416e0602c8184b6b987396b39000000084eb2d92476b8e977ea7f6ca733b6430c82bb0afe21c89e87bdc9b0f6d1aafc7f78fe12f7b43d554750bafb9df219f3f79986e90534cc989d919466eb0b7691c8803201c035045d6cc64e2616104bdf57423fe23b34"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="7205f0bf", @ANYRES16=0x0, @ANYBLOB="200028bd7000fedbdf25070000002900070073797374656d5f753a6f626a6563745f723a75736572696f5f6465766963655f743a73300000000014000200fe8000000000000000000000000000aa0500010000000000080005007f00000108000500ac141425140002000000000000000000000000000000000008000400ac1414aa"], 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x40) socket$inet_udplite(0x2, 0x2, 0x88) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) (async) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000380)) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x3371], 0x1}) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="7205f0bf", @ANYRES16=0x0, @ANYBLOB="200028bd7000fedbdf25070000002900070073797374656d5f753a6f626a6563745f723a75736572696f5f6465766963655f743a73300000000014000200fe8000000000000000000000000000aa0500010000000000080005007f00000108000500ac141425140002000000000000000000000000000000000008000400ac1414aa"], 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async) 09:40:27 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(0x0, 0x3, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:27 executing program 0: socketpair(0x15, 0x5, 0x5, 0x0) 09:40:27 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x1, 0x595080) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:27 executing program 5: ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@null, 0x2, 'bond0\x00'}) (async, rerun: 32) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:27 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:27 executing program 0: socketpair(0x15, 0x5, 0x5, 0x0) 09:40:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0xffff}, 0x8) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={@null, 0x2, 'ip6_vti0\x00'}) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) ioctl$SIOCX25GCAUSEDIAG(r3, 0x89e6, &(0x7f0000000140)={0x3, 0xb1}) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="cc0000c068c7cb4e51e70acee12fda777861068cd88a487e698483ae80157c288dfe656d1c9b9447a2e9270b9961b770cd0d2ffcd3a3dfaee5f878918454caee4d4a64083961c3e1812fe4af1fe71e2d0c78d9c8615d8cb4d6b5b4bb0137818a81bf79c385eb5c0c8942bd2c94d767d59bfbd04172410ac5074b3cf3e915c5a9260aaf483f61cd11c7dfbe73f1a0516538a4618139ae000000000000", @ANYRES16=r2, @ANYBLOB="00022abd7000fddbdf25410000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000"], 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x0) 09:40:27 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x414902) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000000)={0x3, 0x1}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:27 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x1, 0x595080) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x1, 0x595080) (async) syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 09:40:27 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) recvfrom$x25(r0, &(0x7f0000000040)=""/185, 0xb9, 0x10121, &(0x7f0000000100), 0x12) 09:40:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0xffff}, 0x8) (async) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={@null, 0x2, 'ip6_vti0\x00'}) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) (async) ioctl$SIOCX25GCAUSEDIAG(r3, 0x89e6, &(0x7f0000000140)={0x3, 0xb1}) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="cc0000c068c7cb4e51e70acee12fda777861068cd88a487e698483ae80157c288dfe656d1c9b9447a2e9270b9961b770cd0d2ffcd3a3dfaee5f878918454caee4d4a64083961c3e1812fe4af1fe71e2d0c78d9c8615d8cb4d6b5b4bb0137818a81bf79c385eb5c0c8942bd2c94d767d59bfbd04172410ac5074b3cf3e915c5a9260aaf483f61cd11c7dfbe73f1a0516538a4618139ae000000000000", @ANYRES16=r2, @ANYBLOB="00022abd7000fddbdf25410000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000"], 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x0) 09:40:27 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x5, 0x200000) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000140)) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040)) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x1, 0x101000) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x6, 0x18001) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x0) 09:40:27 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:27 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) recvfrom$x25(r0, &(0x7f0000000040)=""/185, 0xb9, 0x10121, &(0x7f0000000100), 0x12) socketpair(0x23, 0x0, 0x100000, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) (async) recvfrom$x25(r0, &(0x7f0000000040)=""/185, 0xb9, 0x10121, &(0x7f0000000100), 0x12) (async) 09:40:27 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x1, 0x595080) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x1, 0x595080) (async) syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 09:40:27 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x5, 0x200000) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000140)) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040)) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x1, 0x101000) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) (async) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x6, 0x18001) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x0) 09:40:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0xffff}, 0x8) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={@null, 0x2, 'ip6_vti0\x00'}) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) ioctl$SIOCX25GCAUSEDIAG(r3, 0x89e6, &(0x7f0000000140)={0x3, 0xb1}) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="cc0000c068c7cb4e51e70acee12fda777861068cd88a487e698483ae80157c288dfe656d1c9b9447a2e9270b9961b770cd0d2ffcd3a3dfaee5f878918454caee4d4a64083961c3e1812fe4af1fe71e2d0c78d9c8615d8cb4d6b5b4bb0137818a81bf79c385eb5c0c8942bd2c94d767d59bfbd04172410ac5074b3cf3e915c5a9260aaf483f61cd11c7dfbe73f1a0516538a4618139ae000000000000", @ANYRES16=r2, @ANYBLOB="00022abd7000fddbdf25410000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000"], 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0xffff}, 0x8) (async) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={@null, 0x2, 'ip6_vti0\x00'}) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r1, 0x1264, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r3, 0x1264, 0x0) (async) ioctl$SIOCX25GCAUSEDIAG(r3, 0x89e6, &(0x7f0000000140)={0x3, 0xb1}) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="cc0000c068c7cb4e51e70acee12fda777861068cd88a487e698483ae80157c288dfe656d1c9b9447a2e9270b9961b770cd0d2ffcd3a3dfaee5f878918454caee4d4a64083961c3e1812fe4af1fe71e2d0c78d9c8615d8cb4d6b5b4bb0137818a81bf79c385eb5c0c8942bd2c94d767d59bfbd04172410ac5074b3cf3e915c5a9260aaf483f61cd11c7dfbe73f1a0516538a4618139ae000000000000", @ANYRES16=r2, @ANYBLOB="00022abd7000fddbdf25410000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000"], 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) 09:40:27 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:27 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x414902) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000000)={0x3, 0x1}) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:27 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x5, 0x200000) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000140)) (async) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040)) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x1, 0x101000) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) (async) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x6, 0x18001) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x0) 09:40:27 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) recvfrom$x25(r0, &(0x7f0000000040)=""/185, 0xb9, 0x10121, &(0x7f0000000100), 0x12) 09:40:27 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x8e601) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:27 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0}, 0x0) 09:40:27 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async, rerun: 32) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x414902) (rerun: 32) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000000)={0x3, 0x1}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:27 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x5a9c02) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000140)) 09:40:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0}, 0x0) (async) 09:40:27 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x8e601) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async, rerun: 64) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:27 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0xec, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3f}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xc, 0xbd, [0x4, 0x422b, 0x8001, 0x48e]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x80}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x7e, 0xbe, "f74ae93d9eb9064d40a3e59e26e83945061773f87e011d267d0dd161ebbf417423fd58a0c5fe79ccf9f055e7b26caf89f97920444c9b41c2d9132a7d7be4b041b2592cdf498c90a3a85de60e6ad5001f5ec752e619d35c88f85f58ecd60986583c72d1a4ee5bda1a9da0c23813fbbeaa314110ec0c7b1d2c555d"}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xec}, 0x1, 0x0, 0x0, 0x4040811}, 0x84) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x71d}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) 09:40:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0}, 0x0) (async) 09:40:27 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:27 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x8e601) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:27 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x5a9c02) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000140)) syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x5a9c02) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000140)) (async) 09:40:27 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, &(0x7f0000000140)={'pim6reg1\x00', 0x6, 0x3}) 09:40:27 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0xec, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3f}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xc, 0xbd, [0x4, 0x422b, 0x8001, 0x48e]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x80}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x7e, 0xbe, "f74ae93d9eb9064d40a3e59e26e83945061773f87e011d267d0dd161ebbf417423fd58a0c5fe79ccf9f055e7b26caf89f97920444c9b41c2d9132a7d7be4b041b2592cdf498c90a3a85de60e6ad5001f5ec752e619d35c88f85f58ecd60986583c72d1a4ee5bda1a9da0c23813fbbeaa314110ec0c7b1d2c555d"}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xec}, 0x1, 0x0, 0x0, 0x4040811}, 0x84) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x71d}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) 09:40:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r2, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008801}, 0x4) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_virt_wifi\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:ppp_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x60}}, 0x404c000) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x94, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:public_content_rw_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:usr_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x0) 09:40:27 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000040)) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:27 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0xec, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3f}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xc, 0xbd, [0x4, 0x422b, 0x8001, 0x48e]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x80}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x7e, 0xbe, "f74ae93d9eb9064d40a3e59e26e83945061773f87e011d267d0dd161ebbf417423fd58a0c5fe79ccf9f055e7b26caf89f97920444c9b41c2d9132a7d7be4b041b2592cdf498c90a3a85de60e6ad5001f5ec752e619d35c88f85f58ecd60986583c72d1a4ee5bda1a9da0c23813fbbeaa314110ec0c7b1d2c555d"}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xec}, 0x1, 0x0, 0x0, 0x4040811}, 0x84) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x71d}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) 09:40:27 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) (async) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, &(0x7f0000000140)={'pim6reg1\x00', 0x6, 0x3}) 09:40:27 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:27 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000040)) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000040)) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 09:40:27 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) 09:40:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r2, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008801}, 0x4) (async) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_virt_wifi\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:ppp_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x60}}, 0x404c000) (async) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x94, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:public_content_rw_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:usr_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x0) 09:40:27 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x5a9c02) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000140)) 09:40:27 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:27 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) (async) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, &(0x7f0000000140)={'pim6reg1\x00', 0x6, 0x3}) 09:40:27 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) 09:40:27 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000000)={0x1, 0x100}) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) 09:40:27 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) (async) 09:40:27 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (rerun: 64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000040)) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async, rerun: 32) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r2, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008801}, 0x4) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_virt_wifi\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:ppp_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x60}}, 0x404c000) (async) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x94, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:public_content_rw_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:usr_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x0) 09:40:27 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x208200, 0x0) recvfrom$x25(r0, &(0x7f0000000040)=""/184, 0xae, 0x20, &(0x7f0000000100), 0xfffffffffffffd7e) 09:40:27 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000000)={0x1, 0x100}) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) 09:40:27 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) ioctl$BLKFRASET(r1, 0x1264, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) 09:40:27 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x208200, 0x0) recvfrom$x25(r0, &(0x7f0000000040)=""/184, 0xae, 0x20, &(0x7f0000000100), 0xfffffffffffffd7e) 09:40:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 09:40:27 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:27 executing program 1: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x10000) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/156) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xa, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x4a}, @generic={0x20, 0x0, 0x2, 0x5, 0xe1ef437}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc5}, @alu={0x7, 0x0, 0xb, 0x6, 0xdadf8cbb8b6ad08a, 0x100, 0x4}, @jmp={0x5, 0x1, 0x9, 0x5, 0xb, 0xffffffffffffffe0, 0x10}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x6}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x75, &(0x7f0000000200)=""/117, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x0, 0x3, 0x4300}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)}, 0x80) 09:40:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 09:40:28 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) ioctl$BLKFRASET(r1, 0x1264, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) (async) ioctl$BLKFRASET(r1, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) (async) 09:40:28 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) (async) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000000)={0x1, 0x100}) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) 09:40:28 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x208200, 0x0) recvfrom$x25(r0, &(0x7f0000000040)=""/184, 0xae, 0x20, &(0x7f0000000100), 0xfffffffffffffd7e) 09:40:28 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:28 executing program 1: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x10000) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/156) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xa, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x4a}, @generic={0x20, 0x0, 0x2, 0x5, 0xe1ef437}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc5}, @alu={0x7, 0x0, 0xb, 0x6, 0xdadf8cbb8b6ad08a, 0x100, 0x4}, @jmp={0x5, 0x1, 0x9, 0x5, 0xb, 0xffffffffffffffe0, 0x10}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x6}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x75, &(0x7f0000000200)=""/117, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x0, 0x3, 0x4300}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)}, 0x80) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x10000) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/156) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xa, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x4a}, @generic={0x20, 0x0, 0x2, 0x5, 0xe1ef437}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc5}, @alu={0x7, 0x0, 0xb, 0x6, 0xdadf8cbb8b6ad08a, 0x100, 0x4}, @jmp={0x5, 0x1, 0x9, 0x5, 0xb, 0xffffffffffffffe0, 0x10}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x6}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x75, &(0x7f0000000200)=""/117, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x0, 0x3, 0x4300}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)}, 0x80) (async) 09:40:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r0) socketpair(0x23, 0x0, 0x100000, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r1, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0xc000) sendto$x25(0xffffffffffffffff, &(0x7f0000000000)="9ba272a62f4de124227bd96465f76c7c2162598a92ae8542b826aac9e619f1c34d82f399e51b0274aeb51365a040b0f872bf0b4a9429e8dd77828ce227cf1a4b19c89b9669fe9593a080b67e5da7fa93421700c7220f9fd920ef1acd559e00555bf662e7cef085efd7807ebce1ad897e4c99f0f3d1945b25ca5408175a1033cef6844121950d15382f09ce8465049301bd96a24bb9d4330181a5ab0dd5842c658a9e08081fb5e1fa340a36671c", 0xad, 0x2000c010, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080025bd7000fddbdf250700000008000400ac1e00010502f8000100000014000200fe880000000000000000000000000101080005000a01010114000300ff0200000000bc19ca6000000000000108000400e000000108000400ac1e0001"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x800) 09:40:28 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) ioctl$BLKFRASET(r1, 0x1264, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) (async) ioctl$BLKFRASET(r1, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) (async) 09:40:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 09:40:28 executing program 5: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:28 executing program 1: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x10000) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/156) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xa, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x4a}, @generic={0x20, 0x0, 0x2, 0x5, 0xe1ef437}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc5}, @alu={0x7, 0x0, 0xb, 0x6, 0xdadf8cbb8b6ad08a, 0x100, 0x4}, @jmp={0x5, 0x1, 0x9, 0x5, 0xb, 0xffffffffffffffe0, 0x10}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x6}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x75, &(0x7f0000000200)=""/117, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x0, 0x3, 0x4300}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)}, 0x80) 09:40:28 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r0) socketpair(0x23, 0x0, 0x100000, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r1, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0xc000) sendto$x25(0xffffffffffffffff, &(0x7f0000000000)="9ba272a62f4de124227bd96465f76c7c2162598a92ae8542b826aac9e619f1c34d82f399e51b0274aeb51365a040b0f872bf0b4a9429e8dd77828ce227cf1a4b19c89b9669fe9593a080b67e5da7fa93421700c7220f9fd920ef1acd559e00555bf662e7cef085efd7807ebce1ad897e4c99f0f3d1945b25ca5408175a1033cef6844121950d15382f09ce8465049301bd96a24bb9d4330181a5ab0dd5842c658a9e08081fb5e1fa340a36671c", 0xad, 0x2000c010, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080025bd7000fddbdf250700000008000400ac1e00010502f8000100000014000200fe880000000000000000000000000101080005000a01010114000300ff0200000000bc19ca6000000000000108000400e000000108000400ac1e0001"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x800) 09:40:28 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x78, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'xfrm0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x24064010}, 0x40040) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r4, 0x1264, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f00000002c0)={0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 09:40:28 executing program 5: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x6000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x3, 0x8) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f00000000c0)={0x7fffffff, 0xbe}) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000140)) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) 09:40:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xcc, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dvmrp0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'tunl0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:tape_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20049000}, 0x200008c0) 09:40:28 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) 09:40:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r0) socketpair(0x23, 0x0, 0x100000, 0x0) (async, rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r1, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0xc000) (async, rerun: 32) sendto$x25(0xffffffffffffffff, &(0x7f0000000000)="9ba272a62f4de124227bd96465f76c7c2162598a92ae8542b826aac9e619f1c34d82f399e51b0274aeb51365a040b0f872bf0b4a9429e8dd77828ce227cf1a4b19c89b9669fe9593a080b67e5da7fa93421700c7220f9fd920ef1acd559e00555bf662e7cef085efd7807ebce1ad897e4c99f0f3d1945b25ca5408175a1033cef6844121950d15382f09ce8465049301bd96a24bb9d4330181a5ab0dd5842c658a9e08081fb5e1fa340a36671c", 0xad, 0x2000c010, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080025bd7000fddbdf250700000008000400ac1e00010502f8000100000014000200fe880000000000000000000000000101080005000a01010114000300ff0200000000bc19ca6000000000000108000400e000000108000400ac1e0001"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x800) 09:40:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xcc, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dvmrp0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'tunl0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:tape_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20049000}, 0x200008c0) 09:40:28 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)=0x40) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000000)={0x0, 0x80000001, 0x2, 0xa11}) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) 09:40:28 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x4200) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x8, 0x80, 0x9, 0x7f, 0x3], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f0000000300)='tasks\x00', 0x2, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:28 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) 09:40:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xcc, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dvmrp0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'tunl0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:tape_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20049000}, 0x200008c0) 09:40:28 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async, rerun: 32) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$BLKFRASET(r2, 0x1264, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x78, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'xfrm0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x24064010}, 0x40040) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r4, 0x1264, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f00000002c0)={0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (rerun: 64) 09:40:28 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) 09:40:28 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x4200) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x8, 0x80, 0x9, 0x7f, 0x3], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f0000000300)='tasks\x00', 0x2, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000000)={0xfffffffffffffffc, 0x1f, 0x0, 0x1, 0x0, 0x0, 0xc840}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r2, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000040)=0x7) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000080}, 0x40c4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c010}, 0xc480) 09:40:28 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)=0x40) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000000)={0x0, 0x80000001, 0x2, 0xa11}) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) (async) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)=0x40) (async) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) (async) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000000)={0x0, 0x80000001, 0x2, 0xa11}) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) (async) 09:40:28 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) 09:40:28 executing program 0: socketpair(0x22, 0xd, 0x100000, 0x0) socketpair(0x27, 0x6, 0xfff, &(0x7f0000000000)) 09:40:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000000)={0xfffffffffffffffc, 0x1f, 0x0, 0x1, 0x0, 0x0, 0xc840}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r2, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) (async) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000040)=0x7) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000080}, 0x40c4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c010}, 0xc480) 09:40:28 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x78, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'xfrm0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x24064010}, 0x40040) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r4, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f00000002c0)={0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 09:40:28 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) 09:40:28 executing program 0: socketpair(0x22, 0xd, 0x100000, 0x0) (async) socketpair(0x27, 0x6, 0xfff, &(0x7f0000000000)) 09:40:28 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x4200) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x8, 0x80, 0x9, 0x7f, 0x3], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f0000000300)='tasks\x00', 0x2, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:28 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) 09:40:28 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x800000000000000, 0x802) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000000)={0xfffffffffffffffc, 0x1f, 0x0, 0x1, 0x0, 0x0, 0xc840}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r2, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000040)=0x7) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000080}, 0x40c4) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c010}, 0xc480) 09:40:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000000)=0x7) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:28 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) (async) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)=0x40) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) (async) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000000)={0x0, 0x80000001, 0x2, 0xa11}) (async) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) 09:40:28 executing program 0: socketpair(0x22, 0xd, 0x100000, 0x0) socketpair(0x27, 0x6, 0xfff, &(0x7f0000000000)) socketpair(0x22, 0xd, 0x100000, 0x0) (async) socketpair(0x27, 0x6, 0xfff, &(0x7f0000000000)) (async) 09:40:28 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xfff], 0x1, 0x0, 0x0, 0xffffffffffffffff}) read$usbmon(r0, &(0x7f0000000080)=""/72, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c4}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r3, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x22020880) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r4, 0x1264, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f0000000440)={0x7f, 0xffffffff, 0x134f217b, 0x5, 0xd, 0x1}) r5 = syz_open_dev$usbmon(&(0x7f0000000700), 0xfffffffffffffffe, 0x0) ioctl$BLKRESETZONE(r4, 0x40101283, &(0x7f0000000480)={0x8000000000000001, 0x1000}) ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000280)={&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000180)=""/195, 0xc3}) 09:40:28 executing program 4: socketpair(0x23, 0x0, 0x100000, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000000)=0x1, 0x4) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x3aff82, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000080)={0x2, 0x3, 0x7, 0xf7d4, 0x5, 0x2, 0xe33, 0x7f, 0x1}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x6, 0x800) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x9, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f0000000240)={r4, 0x4}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000140)) ioctl$BLKFRASET(r5, 0x1264, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000040)={0x800, 0xffff, {0xffffffffffffffff}, {}, 0x5, 0x3}) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r6, 0x1264, 0x0) setsockopt$netrom_NETROM_IDLE(r6, 0x103, 0x7, &(0x7f0000000280)=0x5, 0x4) 09:40:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000000)=0x7) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000000)=0x7) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) 09:40:28 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x800000000000000, 0x802) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async, rerun: 32) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (rerun: 32) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:28 executing program 0: getpgrp(0xffffffffffffffff) r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000180)) getpgid(r0) socketpair(0x5, 0x3, 0xfffffffe, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x81, 0x35ee, {r0}, {}, 0x80000001, 0x4}) getpgrp(r1) sched_rr_get_interval(r0, &(0x7f0000000000)) 09:40:28 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x4200) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x8, 0x80, 0x9, 0x7f, 0x3], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f0000000300)='tasks\x00', 0x2, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:28 executing program 0: getpgrp(0xffffffffffffffff) (async) r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000180)) getpgid(r0) (async) socketpair(0x5, 0x3, 0xfffffffe, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x81, 0x35ee, {r0}, {}, 0x80000001, 0x4}) getpgrp(r1) sched_rr_get_interval(r0, &(0x7f0000000000)) 09:40:28 executing program 4: socketpair(0x15, 0x6, 0x100000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 09:40:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000000)=0x7) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:28 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000040)) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x8000) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000140)) 09:40:28 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x800000000000000, 0x802) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:29 executing program 0: getpgrp(0xffffffffffffffff) r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000180)) getpgid(r0) socketpair(0x5, 0x3, 0xfffffffe, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x81, 0x35ee, {r0}, {}, 0x80000001, 0x4}) getpgrp(r1) sched_rr_get_interval(r0, &(0x7f0000000000)) getpgrp(0xffffffffffffffff) (async) getpgid(0x0) (async) sched_rr_get_interval(r0, &(0x7f0000000180)) (async) getpgid(r0) (async) socketpair(0x5, 0x3, 0xfffffffe, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x81, 0x35ee, {r0}, {}, 0x80000001, 0x4}) (async) getpgrp(r1) (async) sched_rr_get_interval(r0, &(0x7f0000000000)) (async) 09:40:29 executing program 3: r0 = shmget(0x2, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/129) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r4, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xc}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x4004040) 09:40:29 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8, 0x0, 0x1}) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:29 executing program 3: r0 = shmget(0x2, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/129) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r4, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xc}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x4004040) 09:40:29 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0a010102000000002000000000000000000000000000da711c63345e7c3a0000000001000000006a433e0080"]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 09:40:29 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x4200) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x8, 0x80, 0x9, 0x7f, 0x3], 0x5, 0x80800}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:29 executing program 3: r0 = shmget(0x2, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/129) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x201}, 0x14}}, 0x0) (async, rerun: 64) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r4, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xc}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x4004040) (rerun: 64) 09:40:29 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0a010102000000002000000000000000000000000000da711c63345e7c3a0000000001000000006a433e0080"]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 09:40:29 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x8], 0x1, 0x800, 0x0, 0xffffffffffffffff}) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000001340)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/4096, 0x1000}) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000000200)={'ip_vti0\x00', 0x7, 0x7fff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:29 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (fail_nth: 1) 09:40:29 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async, rerun: 32) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (rerun: 32) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000040)) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x8000) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000140)) 09:40:29 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0a010102000000002000000000000000000000000000da711c63345e7c3a0000000001000000006a433e0080"]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 09:40:29 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:29 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x8], 0x1, 0x800, 0x0, 0xffffffffffffffff}) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000001340)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/4096, 0x1000}) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000000200)={'ip_vti0\x00', 0x7, 0x7fff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x8], 0x1, 0x800}) (async) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000001340)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/4096, 0x1000}) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r3, 0x1264, 0x0) (async) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000000200)={'ip_vti0\x00', 0x7, 0x7fff}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) [ 1893.595685] FAULT_INJECTION: forcing a failure. [ 1893.595685] name failslab, interval 1, probability 0, space 0, times 0 [ 1893.619748] CPU: 1 PID: 17110 Comm: syz-executor.4 Not tainted 4.14.292-syzkaller #0 [ 1893.627646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1893.636996] Call Trace: [ 1893.639574] dump_stack+0x1b2/0x281 [ 1893.643185] should_fail.cold+0x10a/0x149 [ 1893.647314] should_failslab+0xd6/0x130 [ 1893.651292] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1893.655940] ? loop_get_status64+0x100/0x100 [ 1893.660330] __kthread_create_on_node+0xbe/0x3a0 [ 1893.665061] ? kthread_park+0x130/0x130 [ 1893.669017] ? loop_get_status64+0x100/0x100 [ 1893.673404] kthread_create_on_node+0xa8/0xd0 [ 1893.677874] ? __kthread_create_on_node+0x3a0/0x3a0 [ 1893.682869] ? __lockdep_init_map+0x100/0x560 [ 1893.687344] ? __lockdep_init_map+0x100/0x560 [ 1893.691820] lo_ioctl+0xcd9/0x1cd0 [ 1893.695342] ? loop_set_status64+0xe0/0xe0 [ 1893.699557] blkdev_ioctl+0x540/0x1830 [ 1893.703438] ? proc_fail_nth_write+0x7b/0x180 [ 1893.707911] ? blkpg_ioctl+0x8d0/0x8d0 [ 1893.711872] ? trace_hardirqs_on+0x10/0x10 [ 1893.716084] ? fsnotify+0x974/0x11b0 [ 1893.719775] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1893.724695] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1893.729695] ? SyS_write+0x1b7/0x210 [ 1893.733398] block_ioctl+0xd9/0x120 [ 1893.737004] ? blkdev_fallocate+0x3a0/0x3a0 [ 1893.741301] do_vfs_ioctl+0x75a/0xff0 [ 1893.745078] ? lock_acquire+0x170/0x3f0 [ 1893.749028] ? ioctl_preallocate+0x1a0/0x1a0 [ 1893.753414] ? __fget+0x265/0x3e0 [ 1893.756847] ? do_vfs_ioctl+0xff0/0xff0 [ 1893.760807] ? security_file_ioctl+0x83/0xb0 [ 1893.765193] SyS_ioctl+0x7f/0xb0 [ 1893.768540] ? do_vfs_ioctl+0xff0/0xff0 [ 1893.772493] do_syscall_64+0x1d5/0x640 [ 1893.776370] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1893.781537] RIP: 0033:0x7f61a3d133c9 [ 1893.785228] RSP: 002b:00007f61a2688168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 09:40:29 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) 09:40:29 executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) socketpair(0x28, 0x3, 0x100003, 0x0) [ 1893.792999] RAX: ffffffffffffffda RBX: 00007f61a3e25f80 RCX: 00007f61a3d133c9 [ 1893.800249] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1893.807502] RBP: 00007f61a26881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1893.814747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1893.821990] R13: 00007ffde209e99f R14: 00007f61a2688300 R15: 0000000000022000 09:40:29 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x8], 0x1, 0x800, 0x0, 0xffffffffffffffff}) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000001340)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/4096, 0x1000}) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000000200)={'ip_vti0\x00', 0x7, 0x7fff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x8], 0x1, 0x800}) (async) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000001340)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/4096, 0x1000}) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r3, 0x1264, 0x0) (async) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000000200)={'ip_vti0\x00', 0x7, 0x7fff}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 09:40:29 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x4200) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:29 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000040)) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x8000) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000140)) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) (async) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000040)) (async) syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x8000) (async) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000140)) (async) 09:40:29 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (fail_nth: 2) 09:40:29 executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) (async) socketpair(0x28, 0x3, 0x100003, 0x0) 09:40:29 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) [ 1893.984215] FAULT_INJECTION: forcing a failure. [ 1893.984215] name failslab, interval 1, probability 0, space 0, times 0 [ 1894.009370] CPU: 1 PID: 17150 Comm: syz-executor.4 Not tainted 4.14.292-syzkaller #0 [ 1894.017405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1894.026758] Call Trace: [ 1894.029349] dump_stack+0x1b2/0x281 [ 1894.032980] should_fail.cold+0x10a/0x149 [ 1894.037132] ? mempool_free+0x1d0/0x1d0 [ 1894.041103] should_failslab+0xd6/0x130 [ 1894.045164] kmem_cache_alloc+0x40/0x3c0 [ 1894.049229] ? mempool_free+0x1d0/0x1d0 [ 1894.053203] mempool_alloc+0x10e/0x2d0 [ 1894.057092] ? _raw_spin_unlock_irq+0x24/0x80 [ 1894.061586] ? remove_element.isra.0+0x1b0/0x1b0 [ 1894.066340] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1894.071352] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1894.075844] ? __schedule+0x1450/0x1de0 [ 1894.079815] ? cpuacct_charge+0x1cf/0x350 [ 1894.083968] bio_alloc_bioset+0x41b/0x830 [ 1894.088118] ? bvec_alloc+0x2d0/0x2d0 [ 1894.092008] ? errseq_check+0x42/0x80 [ 1894.095801] ? file_check_and_advance_wb_err+0x91/0x370 [ 1894.101152] blkdev_issue_flush+0xeb/0x320 [ 1894.105365] blkdev_fsync+0x80/0xb0 [ 1894.108983] ? thaw_bdev+0x180/0x180 [ 1894.112681] vfs_fsync+0xff/0x210 [ 1894.116126] __loop_update_dio+0x480/0x640 [ 1894.120340] lo_ioctl+0x10a9/0x1cd0 [ 1894.123956] ? loop_set_status64+0xe0/0xe0 [ 1894.128191] blkdev_ioctl+0x540/0x1830 [ 1894.132068] ? proc_fail_nth_write+0x7b/0x180 [ 1894.136548] ? blkpg_ioctl+0x8d0/0x8d0 [ 1894.140413] ? trace_hardirqs_on+0x10/0x10 [ 1894.144637] ? fsnotify+0x974/0x11b0 [ 1894.148332] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1894.153241] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1894.158250] ? SyS_write+0x1b7/0x210 [ 1894.161955] block_ioctl+0xd9/0x120 [ 1894.165569] ? blkdev_fallocate+0x3a0/0x3a0 [ 1894.169881] do_vfs_ioctl+0x75a/0xff0 [ 1894.173670] ? lock_acquire+0x170/0x3f0 [ 1894.177643] ? ioctl_preallocate+0x1a0/0x1a0 [ 1894.182030] ? __fget+0x265/0x3e0 [ 1894.185471] ? do_vfs_ioctl+0xff0/0xff0 [ 1894.189430] ? security_file_ioctl+0x83/0xb0 [ 1894.193834] SyS_ioctl+0x7f/0xb0 [ 1894.197176] ? do_vfs_ioctl+0xff0/0xff0 [ 1894.201142] do_syscall_64+0x1d5/0x640 [ 1894.205009] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1894.210180] RIP: 0033:0x7f61a3d133c9 [ 1894.213870] RSP: 002b:00007f61a2688168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1894.221625] RAX: ffffffffffffffda RBX: 00007f61a3e25f80 RCX: 00007f61a3d133c9 09:40:29 executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) (async) socketpair(0x28, 0x3, 0x100003, 0x0) [ 1894.228872] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1894.236121] RBP: 00007f61a26881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1894.243370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1894.250620] R13: 00007ffde209e99f R14: 00007f61a2688300 R15: 0000000000022000 09:40:30 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x4200) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:30 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (fail_nth: 3) 09:40:30 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x5) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x1f, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:30 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000000)) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:30 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x5f863fdb) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000040)) 09:40:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xbc, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x81}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devpts_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0xbc}}, 0x8040) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="c400002b702a3dec60fd9713711100", @ANYRES16=r3, @ANYBLOB="02002bbd7000fcdbdf25040000002400070073797374656d5f753a6f626a6563745f723a7661725f6c6f636b5f743a7330001400060070696d36726567300000000000000000140006007663616e300000000000000000000000080004000a0101021400020020010000000000000000000000000002050001000100000008000400ac1e000114000300fe8000000000000000000000000000aa2300070073797374656d5f753a6f626a6563745f723a696e697463746c5f743a73300000"], 0xc4}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000004) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) 09:40:30 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x5f863fdb) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000040)) 09:40:30 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x4200) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xbc, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x81}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devpts_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0xbc}}, 0x8040) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x201}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="c400002b702a3dec60fd9713711100", @ANYRES16=r3, @ANYBLOB="02002bbd7000fcdbdf25040000002400070073797374656d5f753a6f626a6563745f723a7661725f6c6f636b5f743a7330001400060070696d36726567300000000000000000140006007663616e300000000000000000000000080004000a0101021400020020010000000000000000000000000002050001000100000008000400ac1e000114000300fe8000000000000000000000000000aa2300070073797374656d5f753a6f626a6563745f723a696e697463746c5f743a73300000"], 0xc4}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000004) (async) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) 09:40:30 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x5f863fdb) (async) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000040)) [ 1894.486054] FAULT_INJECTION: forcing a failure. [ 1894.486054] name failslab, interval 1, probability 0, space 0, times 0 [ 1894.503569] CPU: 1 PID: 17211 Comm: syz-executor.4 Not tainted 4.14.292-syzkaller #0 [ 1894.511473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1894.520813] Call Trace: [ 1894.523385] dump_stack+0x1b2/0x281 [ 1894.526996] should_fail.cold+0x10a/0x149 [ 1894.531125] should_failslab+0xd6/0x130 [ 1894.535097] kmem_cache_alloc+0x28e/0x3c0 [ 1894.539238] __kernfs_new_node+0x6f/0x470 [ 1894.543462] kernfs_create_dir_ns+0x8c/0x200 [ 1894.547945] internal_create_group+0xe9/0x710 [ 1894.552433] lo_ioctl+0x1137/0x1cd0 [ 1894.556050] ? loop_set_status64+0xe0/0xe0 [ 1894.560296] blkdev_ioctl+0x540/0x1830 [ 1894.564176] ? proc_fail_nth_write+0x7b/0x180 [ 1894.568668] ? blkpg_ioctl+0x8d0/0x8d0 [ 1894.572535] ? trace_hardirqs_on+0x10/0x10 [ 1894.576759] ? fsnotify+0x974/0x11b0 [ 1894.580458] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1894.585366] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1894.590361] ? SyS_write+0x1b7/0x210 [ 1894.594055] block_ioctl+0xd9/0x120 [ 1894.597658] ? blkdev_fallocate+0x3a0/0x3a0 [ 1894.601961] do_vfs_ioctl+0x75a/0xff0 [ 1894.605748] ? lock_acquire+0x170/0x3f0 [ 1894.609706] ? ioctl_preallocate+0x1a0/0x1a0 [ 1894.614093] ? __fget+0x265/0x3e0 [ 1894.617548] ? do_vfs_ioctl+0xff0/0xff0 [ 1894.621505] ? security_file_ioctl+0x83/0xb0 [ 1894.625890] SyS_ioctl+0x7f/0xb0 [ 1894.629231] ? do_vfs_ioctl+0xff0/0xff0 [ 1894.633184] do_syscall_64+0x1d5/0x640 [ 1894.637057] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1894.642223] RIP: 0033:0x7f61a3d133c9 [ 1894.645908] RSP: 002b:00007f61a2688168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1894.653591] RAX: ffffffffffffffda RBX: 00007f61a3e25f80 RCX: 00007f61a3d133c9 [ 1894.660852] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1894.668097] RBP: 00007f61a26881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1894.675346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1894.682612] R13: 00007ffde209e99f R14: 00007f61a2688300 R15: 0000000000022000 09:40:30 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x5) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x1f, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:30 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (fail_nth: 4) 09:40:30 executing program 0: socketpair(0x3, 0x0, 0x100000, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="74756e6c300000000000000000000000c0d8f6a0b31153034fde2102bc6bab229101110bca11", @ANYRES32=0x0, @ANYBLOB="00308000ffffffff000000014039004000660000022f90787f0000017f000001072bb9e0000001ac1414bbac1e0001ac1e00010a010101ac1414aaac1e0101ffffffff000000000a01010000"]}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup, 0xffffffffffffffff, 0x4}, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x7fffffff, 0x7f, 0x5, 0x6, 0xbc, 0x0], 0x6, 0x800, 0x0, 0xffffffffffffffff}) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000200)=[0x6, 0x2, 0x7f2, 0x9c, 0x42, 0x1], 0x6, 0x800, 0x0, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x7, &(0x7f0000000480)=ANY=[@ANYBLOB="03a081000600000085000000bd0000003c600001ffffff1ee0610d7ece599bde001d00001553000018178340", @ANYRES32=0x1, @ANYBLOB="414b602e30010000000000000002000000"], &(0x7f0000000040)='GPL\x00', 0xfe9, 0x3a, &(0x7f0000000080)=""/58, 0x41100, 0x1b, '\x00', r0, 0x1c, r1, 0x8, &(0x7f0000000180)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x8, 0x0, 0x7bb}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0x1, r3, 0xffffffffffffffff]}, 0x80) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r4, 0x1264, 0x0) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0x4) 09:40:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xbc, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x81}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devpts_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0xbc}}, 0x8040) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="c400002b702a3dec60fd9713711100", @ANYRES16=r3, @ANYBLOB="02002bbd7000fcdbdf25040000002400070073797374656d5f753a6f626a6563745f723a7661725f6c6f636b5f743a7330001400060070696d36726567300000000000000000140006007663616e300000000000000000000000080004000a0101021400020020010000000000000000000000000002050001000100000008000400ac1e000114000300fe8000000000000000000000000000aa2300070073797374656d5f753a6f626a6563745f723a696e697463746c5f743a73300000"], 0xc4}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000004) (async) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) 09:40:30 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000000)) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:30 executing program 0: socketpair(0x3, 0x0, 0x100000, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="74756e6c300000000000000000000000c0d8f6a0b31153034fde2102bc6bab229101110bca11", @ANYRES32=0x0, @ANYBLOB="00308000ffffffff000000014039004000660000022f90787f0000017f000001072bb9e0000001ac1414bbac1e0001ac1e00010a010101ac1414aaac1e0101ffffffff000000000a01010000"]}) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup, 0xffffffffffffffff, 0x4}, 0x10) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x7fffffff, 0x7f, 0x5, 0x6, 0xbc, 0x0], 0x6, 0x800, 0x0, 0xffffffffffffffff}) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000200)=[0x6, 0x2, 0x7f2, 0x9c, 0x42, 0x1], 0x6, 0x800, 0x0, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x7, &(0x7f0000000480)=ANY=[@ANYBLOB="03a081000600000085000000bd0000003c600001ffffff1ee0610d7ece599bde001d00001553000018178340", @ANYRES32=0x1, @ANYBLOB="414b602e30010000000000000002000000"], &(0x7f0000000040)='GPL\x00', 0xfe9, 0x3a, &(0x7f0000000080)=""/58, 0x41100, 0x1b, '\x00', r0, 0x1c, r1, 0x8, &(0x7f0000000180)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x8, 0x0, 0x7bb}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0x1, r3, 0xffffffffffffffff]}, 0x80) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r4, 0x1264, 0x0) (async) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0x4) 09:40:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}}, 0x40011) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x184, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x16, 0x7357}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x16, 0xff}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x16, 0x400}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x1}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfffffffd}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x3f}, {0x5}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) 09:40:30 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x5) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x1f, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:30 executing program 0: socketpair(0x3, 0x0, 0x100000, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="74756e6c300000000000000000000000c0d8f6a0b31153034fde2102bc6bab229101110bca11", @ANYRES32=0x0, @ANYBLOB="00308000ffffffff000000014039004000660000022f90787f0000017f000001072bb9e0000001ac1414bbac1e0001ac1e00010a010101ac1414aaac1e0101ffffffff000000000a01010000"]}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup, 0xffffffffffffffff, 0x4}, 0x10) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x7fffffff, 0x7f, 0x5, 0x6, 0xbc, 0x0], 0x6, 0x800, 0x0, 0xffffffffffffffff}) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000200)=[0x6, 0x2, 0x7f2, 0x9c, 0x42, 0x1], 0x6, 0x800, 0x0, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x7, &(0x7f0000000480)=ANY=[@ANYBLOB="03a081000600000085000000bd0000003c600001ffffff1ee0610d7ece599bde001d00001553000018178340", @ANYRES32=0x1, @ANYBLOB="414b602e30010000000000000002000000"], &(0x7f0000000040)='GPL\x00', 0xfe9, 0x3a, &(0x7f0000000080)=""/58, 0x41100, 0x1b, '\x00', r0, 0x1c, r1, 0x8, &(0x7f0000000180)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x8, 0x0, 0x7bb}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0x1, r3, 0xffffffffffffffff]}, 0x80) (async) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r4, 0x1264, 0x0) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0x4) 09:40:30 executing program 5: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x4200) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}}, 0x40011) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x184, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x16, 0x7357}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x16, 0xff}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x16, 0x400}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x1}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfffffffd}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x3f}, {0x5}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) 09:40:30 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x1c5480) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000), 0x0, 0x800, 0x0, 0xffffffffffffffff}) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000000)=0x9) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)=ANY=[@ANYRES16=r1]}) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f00000000c0)) [ 1894.950179] FAULT_INJECTION: forcing a failure. [ 1894.950179] name failslab, interval 1, probability 0, space 0, times 0 [ 1894.990343] CPU: 1 PID: 17248 Comm: syz-executor.4 Not tainted 4.14.292-syzkaller #0 [ 1894.998252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1895.007600] Call Trace: [ 1895.010193] dump_stack+0x1b2/0x281 [ 1895.013838] should_fail.cold+0x10a/0x149 [ 1895.017987] should_failslab+0xd6/0x130 [ 1895.021959] kmem_cache_alloc+0x28e/0x3c0 [ 1895.026106] __kernfs_new_node+0x6f/0x470 [ 1895.030259] kernfs_new_node+0x7b/0xe0 [ 1895.034125] __kernfs_create_file+0x3d/0x320 [ 1895.038520] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1895.043347] ? kernfs_create_dir_ns+0x171/0x200 [ 1895.048006] internal_create_group+0x22b/0x710 [ 1895.052582] lo_ioctl+0x1137/0x1cd0 [ 1895.056190] ? loop_set_status64+0xe0/0xe0 [ 1895.060403] blkdev_ioctl+0x540/0x1830 [ 1895.064268] ? proc_fail_nth_write+0x7b/0x180 [ 1895.068852] ? blkpg_ioctl+0x8d0/0x8d0 [ 1895.072727] ? trace_hardirqs_on+0x10/0x10 [ 1895.076953] ? fsnotify+0x974/0x11b0 [ 1895.080654] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1895.085571] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1895.090590] ? SyS_write+0x1b7/0x210 [ 1895.094286] block_ioctl+0xd9/0x120 [ 1895.097906] ? blkdev_fallocate+0x3a0/0x3a0 [ 1895.102217] do_vfs_ioctl+0x75a/0xff0 [ 1895.106034] ? lock_acquire+0x170/0x3f0 [ 1895.109992] ? ioctl_preallocate+0x1a0/0x1a0 [ 1895.114379] ? __fget+0x265/0x3e0 [ 1895.117810] ? do_vfs_ioctl+0xff0/0xff0 [ 1895.121779] ? security_file_ioctl+0x83/0xb0 [ 1895.126176] SyS_ioctl+0x7f/0xb0 [ 1895.129556] ? do_vfs_ioctl+0xff0/0xff0 [ 1895.133523] do_syscall_64+0x1d5/0x640 09:40:30 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000140)={'pim6reg\x00', 0x1f, 0x8}) [ 1895.137414] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1895.142588] RIP: 0033:0x7f61a3d133c9 [ 1895.146285] RSP: 002b:00007f61a2688168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1895.153987] RAX: ffffffffffffffda RBX: 00007f61a3e25f80 RCX: 00007f61a3d133c9 [ 1895.161233] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1895.168483] RBP: 00007f61a26881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1895.175741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1895.183012] R13: 00007ffde209e99f R14: 00007f61a2688300 R15: 0000000000022000 09:40:31 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (fail_nth: 5) 09:40:31 executing program 5: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x4200) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:31 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x1c5480) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000), 0x0, 0x800, 0x0, 0xffffffffffffffff}) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000000)=0x9) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)=ANY=[@ANYRES16=r1]}) (async) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) (async) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f00000000c0)) 09:40:31 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000000)) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}}, 0x40011) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x184, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x16, 0x7357}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x16, 0xff}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x16, 0x400}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x1}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfffffffd}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x3f}, {0x5}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}}, 0x40011) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r2, 0x1264, 0x0) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x184, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x16, 0x7357}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x16, 0xff}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x16, 0x400}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x1}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfffffffd}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x3f}, {0x5}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) (async) 09:40:31 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000140)={'pim6reg\x00', 0x1f, 0x8}) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000140)={'pim6reg\x00', 0x1f, 0x8}) (async) 09:40:31 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x22082, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:31 executing program 5: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x4200) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:31 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x1c5480) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000), 0x0, 0x800, 0x0, 0xffffffffffffffff}) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000000)=0x9) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)=ANY=[@ANYRES16=r1]}) (async) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) (async) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f00000000c0)) 09:40:31 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000200)={0x8}) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) 09:40:31 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x22082, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:31 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x410000, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f00000003c0)=""/253) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r4, 0x1264, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x7704, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000200)=""/177) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x42, 0x0) 09:40:31 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @default, @netrom={'nr', 0x0}, 0x7f00000, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3ff, 0x6, [@null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @bcast]}) 09:40:31 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:31 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @default, @netrom={'nr', 0x0}, 0x7f00000, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3ff, 0x6, [@null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @bcast]}) 09:40:31 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:31 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000140)={'pim6reg\x00', 0x1f, 0x8}) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000140)={'pim6reg\x00', 0x1f, 0x8}) (async) 09:40:31 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @default, @netrom={'nr', 0x0}, 0x7f00000, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3ff, 0x6, [@null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @bcast]}) 09:40:31 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x22082, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:31 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000200)={0x8}) (async) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) 09:40:31 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @rose}, [@null, @netrom, @default, @remote, @rose, @bcast, @netrom, @netrom]}, &(0x7f0000000100)=0x48) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @default, @netrom={'nr', 0x0}, 0x5, 'syz1\x00', @default, 0x401, 0x7, [@null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) 09:40:31 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:31 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x410000, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f00000003c0)=""/253) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r4, 0x1264, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x7704, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000200)=""/177) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r2, 0x1264, 0x0) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x410000, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) (async) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f00000003c0)=""/253) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r4, 0x1264, 0x0) (async) ioctl$ASHMEM_GET_SIZE(r4, 0x7704, 0x0) (async) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000200)=""/177) (async) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async) 09:40:31 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @rose}, [@null, @netrom, @default, @remote, @rose, @bcast, @netrom, @netrom]}, &(0x7f0000000100)=0x48) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @default, @netrom={'nr', 0x0}, 0x5, 'syz1\x00', @default, 0x401, 0x7, [@null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) 09:40:31 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) socketpair(0x28, 0x3, 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/650]) 09:40:31 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000200)={0x8}) (async) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) 09:40:31 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x4200) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xc8, r2, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, '/usr/lib/telepathy/mission-control-5\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_vlan\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:urandom_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'rose0\x00'}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000000}, 0x48081) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb0, r2, 0x300, 0x70bd2a, 0x8, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:semanage_store_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cpu_online_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4008001}, 0x40000) 09:40:31 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x410000, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f00000003c0)=""/253) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r4, 0x1264, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x7704, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000200)=""/177) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r2, 0x1264, 0x0) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x410000, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) (async) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f00000003c0)=""/253) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r4, 0x1264, 0x0) (async) ioctl$ASHMEM_GET_SIZE(r4, 0x7704, 0x0) (async) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000200)=""/177) (async) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async) 09:40:31 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @rose}, [@null, @netrom, @default, @remote, @rose, @bcast, @netrom, @netrom]}, &(0x7f0000000100)=0x48) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @default, @netrom={'nr', 0x0}, 0x5, 'syz1\x00', @default, 0x401, 0x7, [@null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) 09:40:31 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) socketpair(0x28, 0x3, 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/650]) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) socketpair(0x28, 0x3, 0x2, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) (async) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/650]) (async) 09:40:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xc8, r2, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, '/usr/lib/telepathy/mission-control-5\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_vlan\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:urandom_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'rose0\x00'}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000000}, 0x48081) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb0, r2, 0x300, 0x70bd2a, 0x8, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:semanage_store_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cpu_online_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4008001}, 0x40000) 09:40:31 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000000)={0x5}) socketpair(0x23, 0x0, 0x100000, 0x0) 09:40:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xc8, r2, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, '/usr/lib/telepathy/mission-control-5\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_vlan\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:urandom_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'rose0\x00'}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000000}, 0x48081) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb0, r2, 0x300, 0x70bd2a, 0x8, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:semanage_store_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cpu_online_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4008001}, 0x40000) 09:40:31 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x4200) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:31 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000000)={0x7, 0xdc90, 0x1}) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:31 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:getty_log_t:s0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48100}, 0x0) 09:40:31 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x4200) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:31 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000000)={0x7, 0xdc90, 0x1}) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000000)={0x7, 0xdc90, 0x1}) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) 09:40:31 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000000)={0x5}) socketpair(0x23, 0x0, 0x100000, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000000)={0x5}) (async) socketpair(0x23, 0x0, 0x100000, 0x0) (async) 09:40:31 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) socketpair(0x28, 0x3, 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/650]) 09:40:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:getty_log_t:s0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48100}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:getty_log_t:s0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48100}, 0x0) (async) 09:40:31 executing program 5: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x4200) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:31 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 09:40:31 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000000)={0x5}) (async, rerun: 64) socketpair(0x23, 0x0, 0x100000, 0x0) (rerun: 64) 09:40:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:getty_log_t:s0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48100}, 0x0) 09:40:31 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x7d2c0e79) ioctl$BLKROGET(r0, 0x125e, &(0x7f00000002c0)) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000140)={0x1000, 0x4, 0x0, [{0x7ff, 0x5b962aaa, 0x7, 0x3, 0x9, 0x6, 0xc0, '\x00', 0xbd}, {0x200, 0x9, 0x100000000, 0x62, 0x2c, 0x0, 0x3, '\x00', 0xfffffffffffffff8}, {0x4, 0xfffffffffffffff1, 0x800, 0x7, 0x3f, 0xb, 0xe0, '\x00', 0x5}, {0x0, 0x0, 0x40, 0x29, 0x4, 0xa8, 0x0, '\x00', 0x1}]}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000280)) 09:40:31 executing program 5: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x4200) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:31 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:31 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000000)={0x7, 0xdc90, 0x1}) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000000)={0x7, 0xdc90, 0x1}) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) 09:40:31 executing program 5: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x4200) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x201}, 0x14}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x1, 0x3, 0xffffffff, 0x5, 0x0, 0x0], 0x6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$sock_netrom_SIOCDELRT(r4, 0x890c, &(0x7f0000000300)={0x1, @null, @netrom={'nr', 0x0}, 0x1f, 'syz1\x00', @null, 0x5, 0x5, [@null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast, @null]}) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xa0, r2, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:var_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_vlan\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40006050}, 0x40048) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:31 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(0x0, 0x19, 0x4200) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:31 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x7d2c0e79) (async) ioctl$BLKROGET(r0, 0x125e, &(0x7f00000002c0)) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async, rerun: 32) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000140)={0x1000, 0x4, 0x0, [{0x7ff, 0x5b962aaa, 0x7, 0x3, 0x9, 0x6, 0xc0, '\x00', 0xbd}, {0x200, 0x9, 0x100000000, 0x62, 0x2c, 0x0, 0x3, '\x00', 0xfffffffffffffff8}, {0x4, 0xfffffffffffffff1, 0x800, 0x7, 0x3f, 0xb, 0xe0, '\x00', 0x5}, {0x0, 0x0, 0x40, 0x29, 0x4, 0xa8, 0x0, '\x00', 0x1}]}) (rerun: 32) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000280)) 09:40:31 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$LOOP_CLR_FD(r1, 0x4c01) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x6140) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000200)) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x201}, 0x14}}, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x1, 0x3, 0xffffffff, 0x5, 0x0, 0x0], 0x6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$sock_netrom_SIOCDELRT(r4, 0x890c, &(0x7f0000000300)={0x1, @null, @netrom={'nr', 0x0}, 0x1f, 'syz1\x00', @null, 0x5, 0x5, [@null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast, @null]}) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xa0, r2, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:var_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_vlan\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40006050}, 0x40048) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:32 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000000)=0x4, &(0x7f0000000040)=0x4) 09:40:32 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(0x0, 0x19, 0x4200) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:32 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) sendto$x25(r0, &(0x7f00000003c0)="bb9f10dd69c94edc61797de57e25cc3e37c6b167c745bf793239fbe8334e2a674cf4d1cbb7e58ba61aebe00c718511741cb697d1f6c4d77f697300d6e238518caf4efadff3882a3f8930fa7ea4b73c97e62f30e500295ac01b4b1ee2da8a41bb4671ab6b4478604c90b2b8bd4f064f22418d94cb9ae4cb3193f24e666cc6c7c02cf634e52ea6fc28eff6bbf44d536164e17bbd601e4e77aeb2cde7288e08faaea3b7ae2dde7f99cd595e5fc1316641fe43eae58c2aae0ed4b3cb63b0fd550bdcb216d139697e7abb9938fd7237c0c71b88581d024c787027484f306f5f6b2a12aca85e85499c22ea4eb518b6ed5cafaefa003b6834d50bd4e572b151d44dbd538a6ee017703763db6929dfbd1f481a24de38ef1b25638d66c2570e9f2b0cc9e94986afe21550373c90f524ea9c2405d951e93cc95147499d00feea78b9494d4cde3825c12dd62bc22a2445220bad14105d32b888b2873bb3b3473ff523882f64439640f429cde32f2d535bcd2fd1d6a88ee1a7bbe947d345cfa638dd499ed06b46612dcdc3465af25096e73bb0fe43a0c7194ddc18621027a5abbae634765cde729d5c2d5a7e958a24a0314227608ea6c41916c47ca43f36e05534a1d707a8ba9cf8b824543b16a73d60d3d7f7c1ba7efb86d5d8f2965b92d442f33be19b1639f0825287688251a1630bf9bad26dcd851ce8590caa1dd8f23b9018ccfee0e8192b1835c576010e32e262de1a91e67799ec3f3253c422aab54efaf538043c505fe3787dbb8ad5cafbf52db0821b80ac10d00c88435691e1ae76c9d90b01d3cf73877f94474e254cbb6a7ed5abc5f3d598075969e13f4b12f99008b0c8b6e9d2cfb06e0f215101639d2d312cbd1aefc7672bf4fe0839e9471669293b8f1c5a39239c5fac5ea174eded30afb2aa625b12ec21de3324919bc5c365506cc974018af2eec2f9406543a29957a02a5e9e700e430ea3835c56b43eb1d543830bcc681cd41870845a3cdcf0cfe9981384a72729ea4730c352081f6caa9a8bc7409dbf82e674306b047feebe4b899036418e4200f7b4aee370d6e030046f4a3388c2cd1c703dcb15388b44ea31509a51493240df2b0411a45f7384d6c1fd4613dc6f9dc229b0bd799bd13fde43ee4c6d2cf8cc58d8b8007ac934fafc124b269c0fee459258b82e92d2df797b30648f7fc668b081ca73c3e8c91c5afa312d1bd0a9f983465f07e770d919a3277c2370c5cf11d00db0079f8a3584df6826f43bd158cae4d910eedbd713587125d70b8e13d7b321348a0cd928fea5ea12eeec1b276cf3b0a7f12446a060fabd5df0e8ab7277778812e824a64aacc7a0f656e197954de7ced551d94e97ac2a3ae46c043010b3dca310aab6bf2c6ea10f21c07621755c2378926f4c75fe87996312bc4081c7773ee0604900c10d84678f1563f643766ab8eb21739510db3dee6b6a54a4a08d5ae85073e08a538f91ddcb7acb87853c2950dbfb7b23bc35f99a8a2c1321d01d0b9d291cbeaf85966c312dd2b286e2874fc80f05485b0a88e34b859c5f1e44e06f7cbccaae40123a3defb76bb6c07c5b7ea650caade2a8885eca2b8cdc940b366290701d339e393b34fbc358757718a8ca0c6130f128845b140a4eda5e53a4beecd876f4a91d761e2da43a1f9ca0e59a14ab8294bb0aa1217724f2a67d6cc2c7ed5fc848ae4a8d28dfac0db6eef8997429614957c25734c89cae2a3e23870e54b03dae360146d756d09571504d963fc02d0d16c6ad0a621ecde38ffd526f28ccd7b83665b44e809990225e26780dad4a3b79c9d34f0bf90272c70a296d0321a115dbc62e2f16186d31f22d1d409827ab59c305258b510eaecb6dce9b64639b0ae45079c643ace70f3e190634c69ee810bbcb1f1090ef1b8a155af0785b43bc231692c907b9f73e7b5ec37b890caa51cca33c992d087a564bc682dae9bc5112c58ebf857ccebf8707fce3a0ec8922a8e7a5005399cdf018d50c74da0746c2e444a196643ae9f1a34e8f0f07612585f0b4ad316aceadd7b048fea6206a832b20ab02c52c4d087ef26a3ed11e24d3993d6bc071a6275096ba674182d38ad95ebe6885fa6ffa5f62e1694c7b1651335f58661e9416bf24dc1deaaf41bb495cdca917734e41a0d3873261c3b8f57dea6d9795c0875f2789fbeee0944d804f0f238024c1c38cb1f8f655a6c913be600a04996e88e4b117077eadc5976cd69a2171a8da88fdd3afdc4b7d7d4fdb8f8e1186d8f72d5ce3e913b8aa6ea8a12bc3754765604f9b2b681052fc9ff1a570546f9eba27db01b33c9dcad27c6aca2ed02eac37acb5f4b079b75b09e72891fca571418e3b166aba019f8af580a28610b30e5a3fb384cf1c1249538784063a468c8d2849330db19bad96f37a869a14ac667f6a655f3169fc190fc012ed38b512d62a00879f52538fda2fb0075135695dfab8decf9ffc308ed9c68ad1ef6305db4901f2078875e72a6023e4bdf5749b5675a4d71d443e9489c0dc9bfb4b8fe96157ea4176bec2f6e3fdaa74a9aa85b65e73eaac3485f589d00e721723cd8ca2046e47a898a9860b1b4f082cbef254f451e2e818594aac371ab35dded57e5b09bc24306131d5e89ec381b93f694b60dfd9e2fd3a52b0b063c1973793523b9006c8a4d12292a0d9186f7b740a546f67fccfdd589040cf03a12fe353b638046e97e76e685658916fba193ccbc60ad555f62c60090c4c728c9031fdad879a339aa8bbd652f76bfa7ea4dfac0165dd9cdff7b3a1d04a4c5fc5d6b955a5d46fd849169eb811d136089cca960493650bd96f139fce283dc6165ed7cf5e99b7b80434d656e71d61c6749f4fca5bcadf5fde633d0c210be537a81fd9221452c6334d057bfc7cfa948cca76a86337988ce3f9f1af53e4830bec7883ef43eb7b9ddfe77ba3da320c2718f5f69bb121a52d7f6550602cdecd06111ea4f5057ab1ea960a6d6b458541417e78dfc3f63e907bc984bf16521900da78a4242a3f9708eca02d04565cc35095cf13380f8b4b932673e6881156d8c75147546366ca6771cab01e83255dd9e2f1ffc9b3b5b93661007bcf71443209e01131e08e436af687494359b1e5853ee6e20479ce6f7944b658f542d5c56c301eb758ba96aa0df0fffe05cf424f4b23408a722861791356207750d9a377e6cd65497eecfd4c444d609d4d336a6cb91110b678dc8018d96fe98e385a8b448a65415c144b44bc6214ae51646619aaca9a4a55194459ba87b807cc4ccd61b1e27be65ff4bd3472c273f7aa7a1caf04867ee50aaa3ecb12c9739b83ee1451d99d9310dbc71426847577ab761ce26a2ba92dd0d48f8605cf55285f6fe00ba5c4e0ea5c5e86bd0d6883d2d98bc6596d206e3d5a76983a9b0727ea0bb29625e362c9476f851ac49c091efd63b6f400898d809d805ffbcd5f7fb5d29430bc0412d40745f23c3cab00ce691715377ed7d92e68626a11e71a7e52c42435f194a4388ac783783993b4dd9007b1d7089486499e693d53b15732d3062581fa546e6ccb112da3b3805976ca905c660d587cbe718be64f23bddaeda716880f146a72a32a97cdc21d5c29056cb11587f683c2d203461bdc5dad5793ef236964798cee435dcc4c9ae497b5df1b13102c8d77a596e3006af44d1d689087ca7756d90283e92f4ed3afbbab2008169b71632a548723eba8c1bbf4d6506764f0df3f570a558020774db513077cae6028e3a8ee92bce587a240da7ee929fc66709f1b5fbd85b808c105f14847ef1b2adef2a387ea9a12c9bd94d56f877a10604d2ac32ae21b4461b56b4da4927e9fc264fa67bc2a3a2a6f5859498771b41b6ef60cf992debb3eed2c47683ce3b60b44bde9cd10d51e98fa954d1718484dcbc468dc9ad84aef1d979f76318e9a05bb989d6d974baa72f19228eb1095b3490d2c83c7be678827ed03a394c661549d6831110c105858c42388b0d5b4a422d6f874e6f5cce0ebc598976f773a93b568ee3efc1368627f5b3093a9ef8c2456bf16592e6930a4dd50490ecacdcf3dcb0a65dccb18d8f32636ee56e860e3653487a020f00a5af262ae1268750e031709229423c6058e91bb716e2beb11980a2d4cd669e7e1eb743b5f1e97691d273a73a65d6f28e497c5d9d934bc8f40eafbf286ba2ef3528e2776ffecec6751a5b1369ba095d5c5d63a47c586700ae33b223318836e188d59d69d36e0ef4f42b6a70d2ec184f2c9e6855838295f5b69a2dfd41d51136ca7f480a7fb02fbc4dcbc9d330ce9d5e2653f50cc4b78aa183df7918a68653b4d7001c708af85c69a6ede4cd25f49db959adcf6e65f011c6b05ffd8486e1bbaf6354201edfcfdad4f334dee38d6b3887c98ccd474710f3601adcaebebe73bf4647e0ebcd0ec2742c04da30d7ecd89a6b6957788219cc1d4f41af08c17b9b17c65db2c4365c9618523ab7e408f39f452367700ddb434b15983516bb06f9c11b88c2a7f1b7fffce3b7785f52fbf0c67e979146e621ad2431e015e6b45a3032e27e77ebd9949c309838f3efc961cfa9c559f577de2ae99ea94ad22457c019e009175151de18fc7e5fdbdc0f7439ee179ac52c07ceb9282bd822f2ac1a0d00a9432240d28a30b1040eb654cb1e9cef04730050f2fdf1abac4c090994b4417446d3700a58f216c11ac2e1565e18a0f2a2ac935b42d2c02321edd20e3f54f00edcd40e88f2cbbb1244d2d63d442e28e54b3d9a3c446172086f793fb674b953b039b1b64167017c39109aead333c65f1a780d962fbc9b82fc17e502ed0e256578cf90d6e75fcffb00f9f6469bb7b45297feac289753385078951115bd74fa01687aedb470257eca34ccc21d1bee520185eda0eccf58dfe77b093782a04aa4cefd5669653a9b84bb263e00eecd19b364f09e0fa40bf71e3d03819f1e373a4311dbd1b8d60fa49df90c1015fa2b03a4e9e96c1c69604a6d952fef2d00e56ca248f754b608d3d35b74bb11a27a0576534462d7abd16bbd3027d40cdcf2b5048a46f891f3b839437a5de06a62b11364b82dfb8d943fdd6e0d6e6f381b711508715a3939843578e8bca62e3216e20d78b037ec172bf09ce1485f3db84a99605b31700e0671f819844ee122281bb70b8047fa224d97d81a3673d633c3b21eba5c4c6cd56e2cd4963c3d268b48819be0c1db4b5a1678ea84a6be25fb12b0b6a6993c4b4453ae0f8cb7621810437a144a9c68777c90f2a7314d7cc5eb283cece9baad10854523e8cdab25eea9ef353c5ce12291a787c1c2bca31d9e87438d529dc5db2ef008645d56d02d7ad31be3d9c62b3336b120f520460d7fe14421b85b10d61a9ebb04e4ef1151f26d821396a5604858931f75fc474fb9f50898fcf1b850c9c08377555613bd3551dc687c45c0d28e6649f0cdebf930076e63ec99b544d56b24c20e0494e581ab76f9eccf03f77089426f71c3feb04d37a1e4d20665199e1775b0d12f397cd3172209634c6eaf648ee820748116d2fb1775ea8d7e21255bcfc1cc3105cd92311c5d44e0f6a5087cd2fd4f0f82017827790c5058792a8fcb45b1da283e14f1ed5061d07adde8ee0ac4b2219671fdda43fe397a778973209903f018b12e57441e42c9b5d676030010a019b78882db53a5693e12069ee2124a82569b51386ea9127cae2e988d8a291a4228732d9c30fba09f20a61ff431915ec02c9ba19ed57555c4c7a4be163ec43972e7a07c5be1b437e1496d66c99646e0051745f978db36d2d4752b36a9dbbed2042ec12176f9521adb72555e079a8cfb2590421ba993fb9dce007", 0x1000, 0x20000800, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = semget$private(0x0, 0x0, 0x21) semctl$SEM_STAT(r2, 0x4, 0x12, &(0x7f0000000140)=""/86) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f00000013c0)) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f00000000c0)=0x1, 0x4) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r4, 0x4c00, r1) 09:40:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x201}, 0x14}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x1, 0x3, 0xffffffff, 0x5, 0x0, 0x0], 0x6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$sock_netrom_SIOCDELRT(r4, 0x890c, &(0x7f0000000300)={0x1, @null, @netrom={'nr', 0x0}, 0x1f, 'syz1\x00', @null, 0x5, 0x5, [@null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast, @null]}) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xa0, r2, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:var_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_vlan\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40006050}, 0x40048) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x201}, 0x14}}, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x1, 0x3, 0xffffffff, 0x5, 0x0, 0x0], 0x6}) (async) ioctl$sock_netrom_SIOCDELRT(r4, 0x890c, &(0x7f0000000300)={0x1, @null, @netrom={'nr', 0x0}, 0x1f, 'syz1\x00', @null, 0x5, 0x5, [@null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast, @null]}) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xa0, r2, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:var_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_vlan\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40006050}, 0x40048) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) 09:40:32 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) (async, rerun: 32) ioctl$LOOP_CLR_FD(r1, 0x4c01) (async, rerun: 32) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x6140) (async) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000200)) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:32 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x7d2c0e79) ioctl$BLKROGET(r0, 0x125e, &(0x7f00000002c0)) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000140)={0x1000, 0x4, 0x0, [{0x7ff, 0x5b962aaa, 0x7, 0x3, 0x9, 0x6, 0xc0, '\x00', 0xbd}, {0x200, 0x9, 0x100000000, 0x62, 0x2c, 0x0, 0x3, '\x00', 0xfffffffffffffff8}, {0x4, 0xfffffffffffffff1, 0x800, 0x7, 0x3f, 0xb, 0xe0, '\x00', 0x5}, {0x0, 0x0, 0x40, 0x29, 0x4, 0xa8, 0x0, '\x00', 0x1}]}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000280)) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x7d2c0e79) (async) ioctl$BLKROGET(r0, 0x125e, &(0x7f00000002c0)) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000140)={0x1000, 0x4, 0x0, [{0x7ff, 0x5b962aaa, 0x7, 0x3, 0x9, 0x6, 0xc0, '\x00', 0xbd}, {0x200, 0x9, 0x100000000, 0x62, 0x2c, 0x0, 0x3, '\x00', 0xfffffffffffffff8}, {0x4, 0xfffffffffffffff1, 0x800, 0x7, 0x3f, 0xb, 0xe0, '\x00', 0x5}, {0x0, 0x0, 0x40, 0x29, 0x4, 0xa8, 0x0, '\x00', 0x1}]}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) (async) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000280)) (async) 09:40:32 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000000)=0x4, &(0x7f0000000040)=0x4) 09:40:32 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(0x0, 0x19, 0x4200) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4415}, 0x40000) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:32 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async, rerun: 64) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) sendto$x25(r0, &(0x7f00000003c0)="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", 0x1000, 0x20000800, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async, rerun: 32) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async, rerun: 32) r2 = semget$private(0x0, 0x0, 0x21) semctl$SEM_STAT(r2, 0x4, 0x12, &(0x7f0000000140)=""/86) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f00000013c0)) (async) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f00000000c0)=0x1, 0x4) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r4, 0x4c00, r1) 09:40:32 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) (async) ioctl$LOOP_CLR_FD(r1, 0x4c01) (async, rerun: 32) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x6140) (async, rerun: 32) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000200)) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async, rerun: 64) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:32 executing program 2: ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x3f) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000000)) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:32 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000000)=0x4, &(0x7f0000000040)=0x4) 09:40:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4415}, 0x40000) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4415}, 0x40000) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) 09:40:32 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x4200) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:32 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) accept4$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80000) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:32 executing program 2: ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x3f) (async) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000000)) (async, rerun: 64) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async, rerun: 64) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:32 executing program 0: socketpair(0xb, 0x1, 0x3, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xfc, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x850}, 0x20004080) 09:40:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4415}, 0x40000) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4415}, 0x40000) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) 09:40:32 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x4200) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:32 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) sendto$x25(r0, &(0x7f00000003c0)="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", 0x1000, 0x20000800, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) (async, rerun: 64) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async, rerun: 64) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = semget$private(0x0, 0x0, 0x21) semctl$SEM_STAT(r2, 0x4, 0x12, &(0x7f0000000140)=""/86) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f00000013c0)) (async) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f00000000c0)=0x1, 0x4) (async, rerun: 32) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (rerun: 32) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r4, 0x4c00, r1) 09:40:32 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) (async) accept4$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80000) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:32 executing program 2: ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x3f) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000000)) (async) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:32 executing program 0: socketpair(0xb, 0x1, 0x3, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async, rerun: 64) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xfc, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x850}, 0x20004080) (rerun: 64) 09:40:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}]}, 0x44}, 0x1, 0x0, 0x0, 0x1010}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4008080) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x33d, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044004}, 0x4804) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) 09:40:32 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) accept4$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80000) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:32 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x4200) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:32 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000300)=0x2) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x400000) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x2, 0x4001) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000140)) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)=0x6) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0x7, 0x6, 0x7, 0x0, "fda1573480641e3069ef8c6962484a609fd35ac4f434924058e669d7ba0082a22c07f29e1fab4f6e3f45f76c559ad7ff4963dbfafbab748cd8b99de2a547fd6c", "194f2d1176e9d25d0089a6b5c6bc6470bfe6dbb0edb9109dbef4cb2621fa9e7d", [0x401, 0xfffffffffffffff8]}) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) 09:40:32 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000280)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000140)={0x12, "a9a9ab8d56a9aac5f33819c181ba70aca39aaccb41f06f62afde2b95d6fc3ff0cdee44779617f980b89025af8cc693cf5ada346c5f255cc0542c09e3604916407fb59db63bf5417666a59404f142d70c4fe712febacb6e62927efb114e78051f7e977d4e8043692ff6e9167e9aaf5a89c243824d768427e9a4a3093ef6f37d51"}) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f00000003c0)={0x6d, "0aff16b6f327f31c28f1311f5cbfaa220fb50c91f0951879592c0ceec165469cfba29781c506519b426f5105e39888ef3b2552b1b8d67563e36c1c629386b7bff3162c9d95ceeeb115172218c8d6936f6d4c8071c4704d04c57833bcf2d6046c6d9c7b70decb8396855b95187c6c92f796457694026964d7eedd2e3900d912b4"}) ioctl$BLKFRASET(r2, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000480)) connect$netrom(0xffffffffffffffff, 0x0, 0x0) r5 = openat$md(0xffffffffffffff9c, &(0x7f00000004c0), 0x28000, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000500)={0xff, 0x7, 0x4, 0x5}) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) 09:40:32 executing program 0: socketpair(0xb, 0x1, 0x3, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xfc, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x850}, 0x20004080) 09:40:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}]}, 0x44}, 0x1, 0x0, 0x0, 0x1010}, 0x0) (async) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4008080) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x33d, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044004}, 0x4804) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) 09:40:32 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000300)=0x2) (async, rerun: 64) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x400000) (rerun: 64) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x2, 0x4001) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000140)) (async) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)=0x6) (async, rerun: 64) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0x7, 0x6, 0x7, 0x0, "fda1573480641e3069ef8c6962484a609fd35ac4f434924058e669d7ba0082a22c07f29e1fab4f6e3f45f76c559ad7ff4963dbfafbab748cd8b99de2a547fd6c", "194f2d1176e9d25d0089a6b5c6bc6470bfe6dbb0edb9109dbef4cb2621fa9e7d", [0x401, 0xfffffffffffffff8]}) (rerun: 64) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) 09:40:32 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}]}, 0x44}, 0x1, 0x0, 0x0, 0x1010}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4008080) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x33d, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044004}, 0x4804) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) 09:40:32 executing program 0: socketpair(0x6, 0x2, 0x4, 0x0) 09:40:32 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:32 executing program 0: socketpair(0x6, 0x2, 0x4, 0x0) 09:40:32 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) (async) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000280)) (async) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000140)={0x12, "a9a9ab8d56a9aac5f33819c181ba70aca39aaccb41f06f62afde2b95d6fc3ff0cdee44779617f980b89025af8cc693cf5ada346c5f255cc0542c09e3604916407fb59db63bf5417666a59404f142d70c4fe712febacb6e62927efb114e78051f7e977d4e8043692ff6e9167e9aaf5a89c243824d768427e9a4a3093ef6f37d51"}) (async) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f00000003c0)={0x6d, "0aff16b6f327f31c28f1311f5cbfaa220fb50c91f0951879592c0ceec165469cfba29781c506519b426f5105e39888ef3b2552b1b8d67563e36c1c629386b7bff3162c9d95ceeeb115172218c8d6936f6d4c8071c4704d04c57833bcf2d6046c6d9c7b70decb8396855b95187c6c92f796457694026964d7eedd2e3900d912b4"}) (async) ioctl$BLKFRASET(r2, 0x1264, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async, rerun: 32) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) (async, rerun: 32) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (rerun: 32) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000480)) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r5 = openat$md(0xffffffffffffff9c, &(0x7f00000004c0), 0x28000, 0x0) (rerun: 64) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000500)={0xff, 0x7, 0x4, 0x5}) (async) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) 09:40:32 executing program 0: socketpair(0x6, 0x2, 0x4, 0x0) 09:40:32 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x2200, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) clock_getres(0x4, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x12, 0x80800) sendto$x25(r1, &(0x7f0000000180)="aac41ed3acaf59d7f414c2c107a9f72b62d299cbfba5903e96737f0a58b46c8a5787e76aa5e567fd72420ee27e0428a50269971e98aacd66ae21b0cb5a5cf6fddb3934843e8459cf5d7103fe28ff7f2f056310c742835a82aa7ffdf7fa0b344c9b54620e6dfd52914b2223aa2c0c7f3bed0270939fe905def264d9ab7b43df7a15fae6c6051d5703fec9eb07b983", 0x8e, 0x44000, &(0x7f0000000240), 0x12) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) sched_rr_get_interval(0x0, &(0x7f0000000080)) 09:40:32 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) (async, rerun: 32) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) (async, rerun: 32) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) (async) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:32 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:33 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS={0x24, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x85}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0xff, 0x9]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x2000) 09:40:33 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000300)=0x2) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x400000) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x2, 0x4001) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000140)) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)=0x6) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0x7, 0x6, 0x7, 0x0, "fda1573480641e3069ef8c6962484a609fd35ac4f434924058e669d7ba0082a22c07f29e1fab4f6e3f45f76c559ad7ff4963dbfafbab748cd8b99de2a547fd6c", "194f2d1176e9d25d0089a6b5c6bc6470bfe6dbb0edb9109dbef4cb2621fa9e7d", [0x401, 0xfffffffffffffff8]}) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000300)=0x2) (async) syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x400000) (async) syz_open_dev$loop(&(0x7f00000000c0), 0x2, 0x4001) (async) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000140)) (async) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)=0x6) (async) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0x7, 0x6, 0x7, 0x0, "fda1573480641e3069ef8c6962484a609fd35ac4f434924058e669d7ba0082a22c07f29e1fab4f6e3f45f76c559ad7ff4963dbfafbab748cd8b99de2a547fd6c", "194f2d1176e9d25d0089a6b5c6bc6470bfe6dbb0edb9109dbef4cb2621fa9e7d", [0x401, 0xfffffffffffffff8]}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) (async) 09:40:33 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) (async) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) (async) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 09:40:33 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x2200, 0x0) (async) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) (async) clock_getres(0x4, &(0x7f0000000000)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x12, 0x80800) sendto$x25(r1, &(0x7f0000000180)="aac41ed3acaf59d7f414c2c107a9f72b62d299cbfba5903e96737f0a58b46c8a5787e76aa5e567fd72420ee27e0428a50269971e98aacd66ae21b0cb5a5cf6fddb3934843e8459cf5d7103fe28ff7f2f056310c742835a82aa7ffdf7fa0b344c9b54620e6dfd52914b2223aa2c0c7f3bed0270939fe905def264d9ab7b43df7a15fae6c6051d5703fec9eb07b983", 0x8e, 0x44000, &(0x7f0000000240), 0x12) (async) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) sched_rr_get_interval(0x0, &(0x7f0000000080)) 09:40:33 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS={0x24, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x85}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0xff, 0x9]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x2000) 09:40:33 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000280)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000140)={0x12, "a9a9ab8d56a9aac5f33819c181ba70aca39aaccb41f06f62afde2b95d6fc3ff0cdee44779617f980b89025af8cc693cf5ada346c5f255cc0542c09e3604916407fb59db63bf5417666a59404f142d70c4fe712febacb6e62927efb114e78051f7e977d4e8043692ff6e9167e9aaf5a89c243824d768427e9a4a3093ef6f37d51"}) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f00000003c0)={0x6d, "0aff16b6f327f31c28f1311f5cbfaa220fb50c91f0951879592c0ceec165469cfba29781c506519b426f5105e39888ef3b2552b1b8d67563e36c1c629386b7bff3162c9d95ceeeb115172218c8d6936f6d4c8071c4704d04c57833bcf2d6046c6d9c7b70decb8396855b95187c6c92f796457694026964d7eedd2e3900d912b4"}) ioctl$BLKFRASET(r2, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000480)) connect$netrom(0xffffffffffffffff, 0x0, 0x0) r5 = openat$md(0xffffffffffffff9c, &(0x7f00000004c0), 0x28000, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000500)={0xff, 0x7, 0x4, 0x5}) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) (async) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000280)) (async) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000140)={0x12, "a9a9ab8d56a9aac5f33819c181ba70aca39aaccb41f06f62afde2b95d6fc3ff0cdee44779617f980b89025af8cc693cf5ada346c5f255cc0542c09e3604916407fb59db63bf5417666a59404f142d70c4fe712febacb6e62927efb114e78051f7e977d4e8043692ff6e9167e9aaf5a89c243824d768427e9a4a3093ef6f37d51"}) (async) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f00000003c0)={0x6d, "0aff16b6f327f31c28f1311f5cbfaa220fb50c91f0951879592c0ceec165469cfba29781c506519b426f5105e39888ef3b2552b1b8d67563e36c1c629386b7bff3162c9d95ceeeb115172218c8d6936f6d4c8071c4704d04c57833bcf2d6046c6d9c7b70decb8396855b95187c6c92f796457694026964d7eedd2e3900d912b4"}) (async) ioctl$BLKFRASET(r2, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000480)) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) openat$md(0xffffffffffffff9c, &(0x7f00000004c0), 0x28000, 0x0) (async) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000500)={0xff, 0x7, 0x4, 0x5}) (async) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) (async) 09:40:33 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:33 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS={0x24, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x85}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0xff, 0x9]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x2000) 09:40:33 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:33 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000140)) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x8000004000000002, 0x791081) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000200)) 09:40:33 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x4, 0x6, 0x5, 0xffff, 0x1, 0x5, 0x80, 0x92], 0x8, 0x80800}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) connect$x25(r0, &(0x7f0000000000), 0x12) 09:40:33 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:33 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x2200, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) (async, rerun: 32) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) (async, rerun: 32) clock_getres(0x4, &(0x7f0000000000)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x12, 0x80800) sendto$x25(r1, &(0x7f0000000180)="aac41ed3acaf59d7f414c2c107a9f72b62d299cbfba5903e96737f0a58b46c8a5787e76aa5e567fd72420ee27e0428a50269971e98aacd66ae21b0cb5a5cf6fddb3934843e8459cf5d7103fe28ff7f2f056310c742835a82aa7ffdf7fa0b344c9b54620e6dfd52914b2223aa2c0c7f3bed0270939fe905def264d9ab7b43df7a15fae6c6051d5703fec9eb07b983", 0x8e, 0x44000, &(0x7f0000000240), 0x12) (async) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) (async) sched_rr_get_interval(0x0, &(0x7f0000000080)) 09:40:33 executing program 5: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:33 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x4, 0x6, 0x5, 0xffff, 0x1, 0x5, 0x80, 0x92], 0x8, 0x80800}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) connect$x25(r0, &(0x7f0000000000), 0x12) 09:40:33 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x800, 0x200, 0x6, 0x7, 0x5], 0x5, 0x800, 0x0, 0xffffffffffffffff}) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) 09:40:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048011}, 0xc0a5) 09:40:33 executing program 5: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:33 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:33 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x4, 0x6, 0x5, 0xffff, 0x1, 0x5, 0x80, 0x92], 0x8, 0x80800}) (async, rerun: 32) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) connect$x25(r0, &(0x7f0000000000), 0x12) 09:40:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x201}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048011}, 0xc0a5) 09:40:33 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000140)) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x8000004000000002, 0x791081) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000200)) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000140)) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) syz_open_dev$loop(&(0x7f0000000680), 0x8000004000000002, 0x791081) (async) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) (async) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000200)) (async) 09:40:33 executing program 5: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:33 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x400802, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000180)) sendto$llc(r1, &(0x7f0000000000)="0b783c249ca8f043a1201c158dd42a58d358a747badaf655364c852de50674831f8b6b795629c503fd5e1598caa69409ff83b2ddbe80a0c844dbb628d793744bf2f24672846e81ac4655cf612dbafc0b84fd9cbf8e3b4957ddc0cb87152ab8433e88862c071a8bd87c0104a4557e5fde2b463f12b0bfc9d753d664764696a8e6b928e02610e2979c0434f67ab2417f722521f7c8fdee2ee065fbee5df5423c997d726734d39c5e9f5f86d5a4cc0bf490d471e79ca777dd16", 0xb8, 0x80, &(0x7f00000000c0)={0x1a, 0x30b, 0x3e, 0xdf, 0x4, 0x7, @broadcast}, 0x10) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x5, 0x6, 0x1e, &(0x7f00000001c0)="7e2c5e97c812e768e6b2fbe9e19ddebbf4eed367137aae7949650a04e0e3"}) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000100)=0x1fb, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00'}, 0x10) 09:40:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048011}, 0xc0a5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x201}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048011}, 0xc0a5) (async) 09:40:33 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:33 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x800, 0x200, 0x6, 0x7, 0x5], 0x5, 0x800, 0x0, 0xffffffffffffffff}) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) (async, rerun: 64) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (rerun: 64) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) 09:40:33 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:33 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000140)) (async, rerun: 64) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async, rerun: 64) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x8000004000000002, 0x791081) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000200)) 09:40:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x8811) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="8c00ee7b", @ANYRES16=0x0, @ANYBLOB="080026bd7000fcdbdf250200000008000400ac1e000105000100000000002d00070073797374656d5f753a6f626a6563745f723a68616c645f736f6e797069635f657865635f743a73300000000014000300fe80000000000000000000000000002908000400ac1414aa08000400ac14141114000300fc020000000000000000000000000001"], 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4011) 09:40:33 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x400802, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000180)) (async) sendto$llc(r1, &(0x7f0000000000)="0b783c249ca8f043a1201c158dd42a58d358a747badaf655364c852de50674831f8b6b795629c503fd5e1598caa69409ff83b2ddbe80a0c844dbb628d793744bf2f24672846e81ac4655cf612dbafc0b84fd9cbf8e3b4957ddc0cb87152ab8433e88862c071a8bd87c0104a4557e5fde2b463f12b0bfc9d753d664764696a8e6b928e02610e2979c0434f67ab2417f722521f7c8fdee2ee065fbee5df5423c997d726734d39c5e9f5f86d5a4cc0bf490d471e79ca777dd16", 0xb8, 0x80, &(0x7f00000000c0)={0x1a, 0x30b, 0x3e, 0xdf, 0x4, 0x7, @broadcast}, 0x10) (async) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x5, 0x6, 0x1e, &(0x7f00000001c0)="7e2c5e97c812e768e6b2fbe9e19ddebbf4eed367137aae7949650a04e0e3"}) (async) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000100)=0x1fb, 0x4) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00'}, 0x10) 09:40:33 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x401, 0x12, 0x1a, 0x10, "3d89651e809502c53dd1c72c0a6a906d7ed58cf6ac059f48ff56aec787ce894b51ab965f23e56f69b089bd989999278f01dcb5f5c7de3b4dcfe6149c1c9c7955", "a5086fd985ac56c6d6dde2191a71c3db6782888ea523cf60c3f2aa41ceca6217", [0x287, 0x7]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x8811) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="8c00ee7b", @ANYRES16=0x0, @ANYBLOB="080026bd7000fcdbdf250200000008000400ac1e000105000100000000002d00070073797374656d5f753a6f626a6563745f723a68616c645f736f6e797069635f657865635f743a73300000000014000300fe80000000000000000000000000002908000400ac1414aa08000400ac14141114000300fc020000000000000000000000000001"], 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4011) 09:40:33 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x8811) (async) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="8c00ee7b", @ANYRES16=0x0, @ANYBLOB="080026bd7000fcdbdf250200000008000400ac1e000105000100000000002d00070073797374656d5f753a6f626a6563745f723a68616c645f736f6e797069635f657865635f743a73300000000014000300fe80000000000000000000000000002908000400ac1414aa08000400ac14141114000300fc020000000000000000000000000001"], 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4011) 09:40:33 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x1000000004800000, 0x46c541) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:33 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async, rerun: 64) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x400802, 0x0) (rerun: 64) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000180)) (async) sendto$llc(r1, &(0x7f0000000000)="0b783c249ca8f043a1201c158dd42a58d358a747badaf655364c852de50674831f8b6b795629c503fd5e1598caa69409ff83b2ddbe80a0c844dbb628d793744bf2f24672846e81ac4655cf612dbafc0b84fd9cbf8e3b4957ddc0cb87152ab8433e88862c071a8bd87c0104a4557e5fde2b463f12b0bfc9d753d664764696a8e6b928e02610e2979c0434f67ab2417f722521f7c8fdee2ee065fbee5df5423c997d726734d39c5e9f5f86d5a4cc0bf490d471e79ca777dd16", 0xb8, 0x80, &(0x7f00000000c0)={0x1a, 0x30b, 0x3e, 0xdf, 0x4, 0x7, @broadcast}, 0x10) (async, rerun: 32) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x5, 0x6, 0x1e, &(0x7f00000001c0)="7e2c5e97c812e768e6b2fbe9e19ddebbf4eed367137aae7949650a04e0e3"}) (async, rerun: 32) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000100)=0x1fb, 0x4) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00'}, 0x10) 09:40:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x98, r2, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bond\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg2\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:ldconfig_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000400)=0x401, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:apt_lock_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x888}, 0x8040) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="14002193edffb27cbcf61bd7690617000076fab0bba7022693a4f30e886bb3a11469c2c386285a1970925d78b1fd57f26e41bb12b3ba0965fa2b289ca8950d27a9e88d5c3976cfd63fc1b7f7631b435632e53ccabe8895e323fc23115a70a0a16f1bb7c01edd0ccaab1e52beacfd36cb38b5609a05a6ee1730c98016cb4a0a5fccc57d1a28629484baac7fb709149c16a400a60318ed495650a8b02a58158a", @ANYRES16=0x0, @ANYBLOB="b3ba000000000000000003000000"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0}, 0x0) 09:40:33 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x800, 0x200, 0x6, 0x7, 0x5], 0x5, 0x800, 0x0, 0xffffffffffffffff}) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) (async) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) 09:40:33 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x401, 0x12, 0x1a, 0x10, "3d89651e809502c53dd1c72c0a6a906d7ed58cf6ac059f48ff56aec787ce894b51ab965f23e56f69b089bd989999278f01dcb5f5c7de3b4dcfe6149c1c9c7955", "a5086fd985ac56c6d6dde2191a71c3db6782888ea523cf60c3f2aa41ceca6217", [0x287, 0x7]}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:33 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x1000000004800000, 0x46c541) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) syz_open_dev$loop(&(0x7f0000000080), 0x1000000004800000, 0x46c541) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) 09:40:33 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x98, r2, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bond\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg2\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:ldconfig_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000400)=0x401, 0x4) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x201}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:apt_lock_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x888}, 0x8040) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="14002193edffb27cbcf61bd7690617000076fab0bba7022693a4f30e886bb3a11469c2c386285a1970925d78b1fd57f26e41bb12b3ba0965fa2b289ca8950d27a9e88d5c3976cfd63fc1b7f7631b435632e53ccabe8895e323fc23115a70a0a16f1bb7c01edd0ccaab1e52beacfd36cb38b5609a05a6ee1730c98016cb4a0a5fccc57d1a28629484baac7fb709149c16a400a60318ed495650a8b02a58158a", @ANYRES16=0x0, @ANYBLOB="b3ba000000000000000003000000"], 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0}, 0x0) 09:40:33 executing program 0: r0 = getpgid(0x0) sched_rr_get_interval(0x0, &(0x7f0000000180)) r1 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000200)) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0)=r1, 0x12) getpid() r2 = getpgrp(0x0) r3 = getpgid(0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0xff, 0x8000, {r2}, {0xee01}, 0x1, 0xffffffffffff0000}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x7, 0x2, {r2}, {0xee01}, 0xffffffff80000001, 0x9}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000280)={0x4117, 0x0, &(0x7f0000000240)}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000300)={0x7, 0x0}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000340)={r6, 0x804a2}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x0, 0x3, {r4}, {r5}, 0x2, 0x3}) sched_rr_get_interval(r3, &(0x7f0000000180)) sched_rr_get_interval(0x0, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x4, 0x105, {r0}, {}, 0xffffffff, 0x7}) socketpair(0x23, 0x0, 0x100000, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000040)={0x4, 0x5, 0xffffffff, 0x80000001, 0x2, 0x0, 0x200}) 09:40:33 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x58d802) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async, rerun: 32) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) (rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x98, r2, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bond\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg2\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:ldconfig_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000400)=0x401, 0x4) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x201}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:apt_lock_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x888}, 0x8040) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="14002193edffb27cbcf61bd7690617000076fab0bba7022693a4f30e886bb3a11469c2c386285a1970925d78b1fd57f26e41bb12b3ba0965fa2b289ca8950d27a9e88d5c3976cfd63fc1b7f7631b435632e53ccabe8895e323fc23115a70a0a16f1bb7c01edd0ccaab1e52beacfd36cb38b5609a05a6ee1730c98016cb4a0a5fccc57d1a28629484baac7fb709149c16a400a60318ed495650a8b02a58158a", @ANYRES16=0x0, @ANYBLOB="b3ba000000000000000003000000"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0}, 0x0) 09:40:33 executing program 0: r0 = getpgid(0x0) sched_rr_get_interval(0x0, &(0x7f0000000180)) r1 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000200)) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0)=r1, 0x12) getpid() r2 = getpgrp(0x0) r3 = getpgid(0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0xff, 0x8000, {r2}, {0xee01}, 0x1, 0xffffffffffff0000}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x7, 0x2, {r2}, {0xee01}, 0xffffffff80000001, 0x9}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000280)={0x4117, 0x0, &(0x7f0000000240)}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000300)={0x7, 0x0}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000340)={r6, 0x804a2}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x0, 0x3, {r4}, {r5}, 0x2, 0x3}) sched_rr_get_interval(r3, &(0x7f0000000180)) sched_rr_get_interval(0x0, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x4, 0x105, {r0}, {}, 0xffffffff, 0x7}) socketpair(0x23, 0x0, 0x100000, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000040)={0x4, 0x5, 0xffffffff, 0x80000001, 0x2, 0x0, 0x200}) getpgid(0x0) (async) sched_rr_get_interval(0x0, &(0x7f0000000180)) (async) getpgid(0x0) (async) sched_rr_get_interval(r0, &(0x7f0000000200)) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0)=r1, 0x12) (async) getpid() (async) getpgrp(0x0) (async) getpgid(0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0xff, 0x8000, {r2}, {0xee01}, 0x1, 0xffffffffffff0000}) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x7, 0x2, {r2}, {0xee01}, 0xffffffff80000001, 0x9}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000280)={0x4117, 0x0, &(0x7f0000000240)}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000300)={0x7}) (async) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000340)={r6, 0x804a2}) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x0, 0x3, {r4}, {r5}, 0x2, 0x3}) (async) sched_rr_get_interval(r3, &(0x7f0000000180)) (async) sched_rr_get_interval(0x0, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x4, 0x105, {r0}, {}, 0xffffffff, 0x7}) (async) socketpair(0x23, 0x0, 0x100000, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000040)={0x4, 0x5, 0xffffffff, 0x80000001, 0x2, 0x0, 0x200}) (async) 09:40:33 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x401, 0x12, 0x1a, 0x10, "3d89651e809502c53dd1c72c0a6a906d7ed58cf6ac059f48ff56aec787ce894b51ab965f23e56f69b089bd989999278f01dcb5f5c7de3b4dcfe6149c1c9c7955", "a5086fd985ac56c6d6dde2191a71c3db6782888ea523cf60c3f2aa41ceca6217", [0x287, 0x7]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) (async) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x401, 0x12, 0x1a, 0x10, "3d89651e809502c53dd1c72c0a6a906d7ed58cf6ac059f48ff56aec787ce894b51ab965f23e56f69b089bd989999278f01dcb5f5c7de3b4dcfe6149c1c9c7955", "a5086fd985ac56c6d6dde2191a71c3db6782888ea523cf60c3f2aa41ceca6217", [0x287, 0x7]}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 09:40:33 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x1000000004800000, 0x46c541) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:33 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0) 09:40:33 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x58d802) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:33 executing program 0: r0 = getpgid(0x0) sched_rr_get_interval(0x0, &(0x7f0000000180)) (async) r1 = getpgid(0x0) (async) sched_rr_get_interval(r0, &(0x7f0000000200)) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0)=r1, 0x12) (async) getpid() (async, rerun: 64) r2 = getpgrp(0x0) (rerun: 64) r3 = getpgid(0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0xff, 0x8000, {r2}, {0xee01}, 0x1, 0xffffffffffff0000}) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x7, 0x2, {r2}, {0xee01}, 0xffffffff80000001, 0x9}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000280)={0x4117, 0x0, &(0x7f0000000240)}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000300)={0x7, 0x0}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000340)={r6, 0x804a2}) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x0, 0x3, {r4}, {r5}, 0x2, 0x3}) (async) sched_rr_get_interval(r3, &(0x7f0000000180)) (async) sched_rr_get_interval(0x0, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x4, 0x105, {r0}, {}, 0xffffffff, 0x7}) socketpair(0x23, 0x0, 0x100000, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000040)={0x4, 0x5, 0xffffffff, 0x80000001, 0x2, 0x0, 0x200}) 09:40:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000040)=[{}], 0x80000001, 0x0, '\x00', 0x3, 0x1}) 09:40:34 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x20000) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000000)=0x8c01, 0x4) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:34 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000040)) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) 09:40:34 executing program 0: socketpair(0x18, 0x0, 0x3f, 0x0) socketpair(0x1a, 0x1, 0x1080, &(0x7f0000000000)) 09:40:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000040)=[{}], 0x80000001, 0x0, '\x00', 0x3, 0x1}) 09:40:34 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x58d802) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:34 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) (async) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000040)) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) (async) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) (async) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) 09:40:34 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x20000) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000000)=0x8c01, 0x4) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x20000) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000000)=0x8c01, 0x4) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 09:40:34 executing program 0: socketpair(0x18, 0x0, 0x3f, 0x0) (async) socketpair(0x1a, 0x1, 0x1080, &(0x7f0000000000)) 09:40:34 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0) 09:40:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000040)=[{}], 0x80000001, 0x0, '\x00', 0x3, 0x1}) 09:40:34 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c008161db8d9d0ef8334836fb011000", @ANYRES16=0x0, @ANYBLOB="02002abd7000fcdbdf250600000014000200ff01000000000000000000000000000108000400e0000002080004007f00000114000300fc000000000000000000000000000001"], 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) 09:40:34 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) bind$x25(0xffffffffffffffff, &(0x7f0000000180)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x88940, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0xfffffffffffffffd, 0x143082) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x86f40, 0x0) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f00000000c0)=0x8) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000140)=0x7) 09:40:34 executing program 0: socketpair(0x18, 0x0, 0x3f, 0x0) (async) socketpair(0x1a, 0x1, 0x1080, &(0x7f0000000000)) 09:40:34 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) (async) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000040)) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async, rerun: 64) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (rerun: 64) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) (async) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) (async) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) 09:40:34 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c008161db8d9d0ef8334836fb011000", @ANYRES16=0x0, @ANYBLOB="02002abd7000fcdbdf250600000014000200ff01000000000000000000000000000108000400e0000002080004007f00000114000300fc000000000000000000000000000001"], 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) 09:40:34 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x20000) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000000)=0x8c01, 0x4) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x20000) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000000)=0x8c01, 0x4) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 09:40:34 executing program 0: socketpair(0x3, 0x2, 0x8, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x406301, 0x0) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10, 0xc0000) 09:40:34 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c008161db8d9d0ef8334836fb011000", @ANYRES16=0x0, @ANYBLOB="02002abd7000fcdbdf250600000014000200ff01000000000000000000000000000108000400e0000002080004007f00000114000300fc000000000000000000000000000001"], 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c008161db8d9d0ef8334836fb011000", @ANYRES16=0x0, @ANYBLOB="02002abd7000fcdbdf250600000014000200ff01000000000000000000000000000108000400e0000002080004007f00000114000300fc000000000000000000000000000001"], 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) (async) 09:40:34 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) bind$x25(0xffffffffffffffff, &(0x7f0000000180)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x88940, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) r1 = syz_open_dev$loop(&(0x7f0000000080), 0xfffffffffffffffd, 0x143082) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x86f40, 0x0) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f00000000c0)=0x8) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000140)=0x7) 09:40:34 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0) 09:40:34 executing program 0: socketpair(0x3, 0x2, 0x8, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x406301, 0x0) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10, 0xc0000) socketpair(0x3, 0x2, 0x8, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x406301, 0x0) (async) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10, 0xc0000) (async) 09:40:34 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x282503, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x400, 0x2, 0x7ff, 0x1000}) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) 09:40:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 09:40:34 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) bind$x25(0xffffffffffffffff, &(0x7f0000000180)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x88940, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0xfffffffffffffffd, 0x143082) (async) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x86f40, 0x0) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f00000000c0)=0x8) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) (async) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000140)=0x7) 09:40:34 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x101400) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000000)=0x7ff, 0x4) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) openat$md(0xffffffffffffff9c, &(0x7f00000000c0), 0x2100, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:34 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x282503, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x400, 0x2, 0x7ff, 0x1000}) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x282503, 0x0) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) (async) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x400, 0x2, 0x7ff, 0x1000}) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) (async) 09:40:34 executing program 0: socketpair(0x3, 0x2, 0x8, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x406301, 0x0) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10, 0xc0000) 09:40:34 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:34 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x101400) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000000)=0x7ff, 0x4) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) openat$md(0xffffffffffffff9c, &(0x7f00000000c0), 0x2100, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:34 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x70a42, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xc, 0xbd, [0x1, 0x7f, 0x2, 0x8]}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x5, 0x4}}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0xc8c4}, 0x3c4aaa88440378b7) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r1}) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000080)=0x7) socketpair(0x23, 0x0, 0x100000, 0x0) 09:40:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 09:40:34 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000200)={0x101}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0xfffffffffffffe70) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:34 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000200)={0x101}) (async) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) connect$netrom(0xffffffffffffffff, 0x0, 0xfffffffffffffe70) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:34 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000200)={0x101}) (async, rerun: 64) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (rerun: 64) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async, rerun: 64) connect$netrom(0xffffffffffffffff, 0x0, 0xfffffffffffffe70) (async, rerun: 64) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (rerun: 64) 09:40:34 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x70a42, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xc, 0xbd, [0x1, 0x7f, 0x2, 0x8]}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x5, 0x4}}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0xc8c4}, 0x3c4aaa88440378b7) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r1}) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000080)=0x7) socketpair(0x23, 0x0, 0x100000, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x70a42, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xc, 0xbd, [0x1, 0x7f, 0x2, 0x8]}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x5, 0x4}}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0xc8c4}, 0x3c4aaa88440378b7) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r1}) (async) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000080)=0x7) (async) socketpair(0x23, 0x0, 0x100000, 0x0) (async) 09:40:34 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:34 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x282503, 0x0) (async) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) (async) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x400, 0x2, 0x7ff, 0x1000}) (async) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) 09:40:34 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x101400) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000000)=0x7ff, 0x4) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) openat$md(0xffffffffffffff9c, &(0x7f00000000c0), 0x2100, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:34 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x7fffffff, 0x8000, 0x5d, 0x7f, 0x3f, 0x2, 0x2, 0xa06, 0x22d, 0x400], 0xa, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000001c0)={0x7, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000280)={0xfffffffffffffe01, 0x6, 0x10000, 0xfbfbfbfb}) bind$x25(r3, &(0x7f0000000140)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:34 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, &(0x7f00000000c0)={0x50}) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000000)={0x2, 0x1}) read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/125, 0x7d) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000140)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f00000003c0)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xa}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dbusd_exec_t:s0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) getpgrp(0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0xd1, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000001c0)) 09:40:34 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x7ff, 0x5d7c02) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000000c0)) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000040)=0x60b) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000000)) 09:40:34 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x70a42, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xc, 0xbd, [0x1, 0x7f, 0x2, 0x8]}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x5, 0x4}}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0xc8c4}, 0x3c4aaa88440378b7) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r1}) (async) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000080)=0x7) (async) socketpair(0x23, 0x0, 0x100000, 0x0) 09:40:34 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, &(0x7f00000000c0)={0x50}) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000000)={0x2, 0x1}) read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/125, 0x7d) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000140)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f00000003c0)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xa}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dbusd_exec_t:s0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) getpgrp(0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0xd1, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000001c0)) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, &(0x7f00000000c0)={0x50}) (async) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000000)={0x2, 0x1}) (async) read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/125, 0x7d) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000140)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f00000003c0)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r1) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xa}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dbusd_exec_t:s0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) (async) getpgrp(0xffffffffffffffff) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) syz_open_dev$dri(&(0x7f0000000180), 0xd1, 0x80000) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000001c0)) (async) 09:40:34 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = syz_open_dev$loop(&(0x7f0000000200), 0xfffffffffffffffc, 0x420000) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0x80000001, 0x2, 0x8, 0x18, "ba85da3968062bbe47ad2138112b31866fb2a6523be429d429fa3a91e18b13a4b85911d7a7f67aa0aa56b63c698372025bd5a1fe617ed21a9ebb38396dba0527", "4f4ce0f4602aed54bd1715ca92f5314b62b4546fe43e10e0ab01d143e0c6597a", [0x100000000, 0x4]}) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f0000000000)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x450000, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f00000000c0)={0x6, 0xde27, 0x7fff, 0x2}) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:34 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 09:40:34 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async, rerun: 32) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x7fffffff, 0x8000, 0x5d, 0x7f, 0x3f, 0x2, 0x2, 0xa06, 0x22d, 0x400], 0xa, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000001c0)={0x7, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000280)={0xfffffffffffffe01, 0x6, 0x10000, 0xfbfbfbfb}) bind$x25(r3, &(0x7f0000000140)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (rerun: 64) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:34 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 09:40:34 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:34 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x7ff, 0x5d7c02) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000000c0)) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000040)=0x60b) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000000)) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x7ff, 0x5d7c02) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) (async) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000000c0)) (async) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000040)=0x60b) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000000)) (async) 09:40:34 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) r2 = syz_open_dev$loop(&(0x7f0000000200), 0xfffffffffffffffc, 0x420000) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0x80000001, 0x2, 0x8, 0x18, "ba85da3968062bbe47ad2138112b31866fb2a6523be429d429fa3a91e18b13a4b85911d7a7f67aa0aa56b63c698372025bd5a1fe617ed21a9ebb38396dba0527", "4f4ce0f4602aed54bd1715ca92f5314b62b4546fe43e10e0ab01d143e0c6597a", [0x100000000, 0x4]}) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) (async) ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f0000000000)) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x450000, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f00000000c0)={0x6, 0xde27, 0x7fff, 0x2}) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:34 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, &(0x7f00000000c0)={0x50}) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000000)={0x2, 0x1}) (async) read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/125, 0x7d) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000140)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) (async, rerun: 32) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f00000003c0)) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r1) (rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xa}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dbusd_exec_t:s0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) (async) getpgrp(0xffffffffffffffff) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000180), 0xd1, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000001c0)) 09:40:34 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 09:40:35 executing program 0: ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000000)) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000040)=0x7) socketpair(0x23, 0x0, 0x100000, 0x0) 09:40:35 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:35 executing program 0: ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000000)) (async) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000040)=0x7) (async) socketpair(0x23, 0x0, 0x100000, 0x0) 09:40:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x41) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000280)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000200)=""/100, 0x64}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x90, r4, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2b}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:crypt_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000452afd94799c6bc25f6c70258a0edf95dc5ac0dcaf3464e092caecc0412fb0ba14c12daa9d3d98548a8e4224b8562616b80500000000000000a37fb7d0ac910f8bcc847396260ba68f3a54d5ff33f1a60b8ba7ed13cd25da551acf6f", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fedbdf2501000000080018007f000001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x895) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:35 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x7fffffff, 0x8000, 0x5d, 0x7f, 0x3f, 0x2, 0x2, 0xa06, 0x22d, 0x400], 0xa, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000001c0)={0x7, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000280)={0xfffffffffffffe01, 0x6, 0x10000, 0xfbfbfbfb}) bind$x25(r3, &(0x7f0000000140)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x7fffffff, 0x8000, 0x5d, 0x7f, 0x3f, 0x2, 0x2, 0xa06, 0x22d, 0x400], 0xa, 0x80800}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000001c0)={0x7, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000280)={0xfffffffffffffe01, 0x6, 0x10000, 0xfbfbfbfb}) (async) bind$x25(r3, &(0x7f0000000140)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) 09:40:35 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) r2 = syz_open_dev$loop(&(0x7f0000000200), 0xfffffffffffffffc, 0x420000) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0x80000001, 0x2, 0x8, 0x18, "ba85da3968062bbe47ad2138112b31866fb2a6523be429d429fa3a91e18b13a4b85911d7a7f67aa0aa56b63c698372025bd5a1fe617ed21a9ebb38396dba0527", "4f4ce0f4602aed54bd1715ca92f5314b62b4546fe43e10e0ab01d143e0c6597a", [0x100000000, 0x4]}) (async) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) (async) ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f0000000000)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x450000, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f00000000c0)={0x6, 0xde27, 0x7fff, 0x2}) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:35 executing program 0: ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000000)) (async) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000040)=0x7) socketpair(0x23, 0x0, 0x100000, 0x0) 09:40:35 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x7ff, 0x5d7c02) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) (async) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000000c0)) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000040)=0x60b) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000000)) 09:40:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r2) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x41) (async) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000280)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000200)=""/100, 0x64}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x90, r4, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2b}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:crypt_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000452afd94799c6bc25f6c70258a0edf95dc5ac0dcaf3464e092caecc0412fb0ba14c12daa9d3d98548a8e4224b8562616b80500000000000000a37fb7d0ac910f8bcc847396260ba68f3a54d5ff33f1a60b8ba7ed13cd25da551acf6f", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fedbdf2501000000080018007f000001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x895) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:35 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x1) socketpair(0x23, 0x0, 0x100000, 0x0) 09:40:35 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x434280, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000040)={0x7b41, 0x8}) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:35 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f00000000c0)=0x1) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000040)) 09:40:35 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x1) (async) socketpair(0x23, 0x0, 0x100000, 0x0) 09:40:35 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:35 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async, rerun: 64) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x434280, 0x0) (rerun: 64) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000040)={0x7b41, 0x8}) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:35 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x1) socketpair(0x23, 0x0, 0x100000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) (async) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x1) (async) socketpair(0x23, 0x0, 0x100000, 0x0) (async) 09:40:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r2) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x41) (async) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000280)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000200)=""/100, 0x64}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x90, r4, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2b}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:crypt_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000452afd94799c6bc25f6c70258a0edf95dc5ac0dcaf3464e092caecc0412fb0ba14c12daa9d3d98548a8e4224b8562616b80500000000000000a37fb7d0ac910f8bcc847396260ba68f3a54d5ff33f1a60b8ba7ed13cd25da551acf6f", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fedbdf2501000000080018007f000001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x895) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:35 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f00000000c0)=0x1) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000040)) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) (async) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f00000000c0)=0x1) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x0) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) (async) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000040)) (async) 09:40:35 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3357, 0x0, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000000)={0x64}) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) 09:40:35 executing program 0: socketpair(0x23, 0x6, 0x100001, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x3, 0xbb4, 0xfffffffb, 0x1f, 0x3ff, 0x1ff, 0x9b650], 0x7, 0xc0400, 0x0, 0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080)=0x6, 0x8) 09:40:35 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x434280, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000040)={0x7b41, 0x8}) (async, rerun: 64) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (rerun: 64) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async, rerun: 64) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 64) 09:40:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:35 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3357, 0x0, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000000)={0x64}) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3357, 0x0, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000000)={0x64}) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) (async) 09:40:35 executing program 0: socketpair(0x23, 0x6, 0x100001, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x3, 0xbb4, 0xfffffffb, 0x1f, 0x3ff, 0x1ff, 0x9b650], 0x7, 0xc0400, 0x0, 0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080)=0x6, 0x8) 09:40:35 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f00000000c0)=0x1) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000040)) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) (async) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f00000000c0)=0x1) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x0) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) (async) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000040)) (async) 09:40:35 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:35 executing program 0: socketpair(0x23, 0x6, 0x100001, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x3, 0xbb4, 0xfffffffb, 0x1f, 0x3ff, 0x1ff, 0x9b650], 0x7, 0xc0400, 0x0, 0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080)=0x6, 0x8) 09:40:35 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 09:40:35 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$BLKFRASET(r0, 0x1264, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000000)={0x77359400}, 0x10) socketpair(0x23, 0x0, 0x100000, 0x0) 09:40:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:35 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x5ba6, 0x600) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:35 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$BLKFRASET(r0, 0x1264, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000000)={0x77359400}, 0x10) socketpair(0x23, 0x0, 0x100000, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$LOOP_CLR_FD(r0, 0x4c01) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000000)={0x77359400}, 0x10) (async) socketpair(0x23, 0x0, 0x100000, 0x0) (async) 09:40:35 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) 09:40:35 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3357, 0x0, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000000)={0x64}) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3357, 0x0, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000000)={0x64}) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) (async) 09:40:35 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 09:40:35 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$BLKFRASET(r0, 0x1264, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000000)={0x77359400}, 0x10) (async, rerun: 32) socketpair(0x23, 0x0, 0x100000, 0x0) (rerun: 32) 09:40:35 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:35 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x5ba6, 0x600) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:35 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) (async) 09:40:35 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) (async) 09:40:35 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x5ba6, 0x600) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:35 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x6) 09:40:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$inet(0x2, 0x80000, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000300e796925ba616723d47cd170000"], 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r5, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:pinentry_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008060}, 0x48890) socketpair(0x23, 0x4, 0x401, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCX25GDTEFACILITIES(r6, 0x89ea, &(0x7f0000000100)) ioctl$BLKFRASET(r1, 0x1264, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000000)) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000080)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26008884}, 0x4000) 09:40:35 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x6) 09:40:35 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async, rerun: 64) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async, rerun: 64) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) 09:40:35 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x200000) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:35 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:36 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000040)=0x2000000040000, 0x8) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r1, r0}, 0xc) 09:40:36 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async, rerun: 32) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (rerun: 32) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x6) 09:40:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$inet(0x2, 0x80000, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000300e796925ba616723d47cd170000"], 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r5, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:pinentry_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008060}, 0x48890) socketpair(0x23, 0x4, 0x401, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCX25GDTEFACILITIES(r6, 0x89ea, &(0x7f0000000100)) ioctl$BLKFRASET(r1, 0x1264, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000000)) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000080)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26008884}, 0x4000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socket$inet(0x2, 0x80000, 0x2) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) connect$netrom(r4, &(0x7f0000000300)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000300e796925ba616723d47cd170000"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) (async) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r5, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:pinentry_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008060}, 0x48890) (async) socketpair(0x23, 0x4, 0x401, &(0x7f00000000c0)) (async) ioctl$SIOCX25GDTEFACILITIES(r6, 0x89ea, &(0x7f0000000100)) (async) ioctl$BLKFRASET(r1, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000000)) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000080)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26008884}, 0x4000) (async) 09:40:36 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x200000) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:36 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000001c0)) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000000)) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) syz_open_dev$loop(&(0x7f00000000c0), 0x7bcf, 0x20240) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x5, 0x6, 0x2, 0x2, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0x1}, 0x48) r4 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f00000006c0)) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000040)={0x1, 0xc0f3, 0x2487d1ae, 0x8}) 09:40:36 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff]}) 09:40:36 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x200000) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x200000) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 09:40:36 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x280be0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:36 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000040)=0x2000000040000, 0x8) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r1, r0}, 0xc) 09:40:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$inet(0x2, 0x80000, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000300e796925ba616723d47cd170000"], 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r5, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:pinentry_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008060}, 0x48890) socketpair(0x23, 0x4, 0x401, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCX25GDTEFACILITIES(r6, 0x89ea, &(0x7f0000000100)) ioctl$BLKFRASET(r1, 0x1264, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000000)) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000080)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26008884}, 0x4000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socket$inet(0x2, 0x80000, 0x2) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) connect$netrom(r4, &(0x7f0000000300)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000300e796925ba616723d47cd170000"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) (async) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r5, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:pinentry_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008060}, 0x48890) (async) socketpair(0x23, 0x4, 0x401, &(0x7f00000000c0)) (async) ioctl$SIOCX25GDTEFACILITIES(r6, 0x89ea, &(0x7f0000000100)) (async) ioctl$BLKFRASET(r1, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000000)) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000080)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26008884}, 0x4000) (async) 09:40:36 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) (async) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000001c0)) (async) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000000)) (async) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) (async) syz_open_dev$loop(&(0x7f00000000c0), 0x7bcf, 0x20240) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x5, 0x6, 0x2, 0x2, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0x1}, 0x48) (async) r4 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f00000006c0)) (async) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000040)={0x1, 0xc0f3, 0x2487d1ae, 0x8}) 09:40:36 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x280be0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:36 executing program 1: syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x40402) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x1, 0x8080) openat$md(0xffffffffffffff9c, &(0x7f0000000200), 0x480000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x3, 0x1f, 0x6, 0xffff0000, 0x2, 0x101], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={0xffffffffffffffff, r3}, 0xc) 09:40:36 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) 09:40:36 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000040)=0x2000000040000, 0x8) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) (rerun: 64) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r1, r0}, 0xc) 09:40:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48}, 0x20004004) 09:40:36 executing program 1: syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x40402) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x1, 0x8080) (async, rerun: 32) openat$md(0xffffffffffffff9c, &(0x7f0000000200), 0x480000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x3, 0x1f, 0x6, 0xffff0000, 0x2, 0x101], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={0xffffffffffffffff, r3}, 0xc) 09:40:36 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x280be0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x280be0) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) 09:40:36 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x33}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4080) socketpair(0x23, 0x0, 0x100000, 0x0) 09:40:36 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) 09:40:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48}, 0x20004004) 09:40:36 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x33}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4080) socketpair(0x23, 0x0, 0x100000, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x33}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4080) (async) socketpair(0x23, 0x0, 0x100000, 0x0) (async) 09:40:36 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) (async) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000001c0)) (async) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000000)) (async) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) (async) syz_open_dev$loop(&(0x7f00000000c0), 0x7bcf, 0x20240) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x5, 0x6, 0x2, 0x2, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0x1}, 0x48) r4 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f00000006c0)) (async) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000040)={0x1, 0xc0f3, 0x2487d1ae, 0x8}) 09:40:36 executing program 1: syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x40402) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x1, 0x8080) openat$md(0xffffffffffffff9c, &(0x7f0000000200), 0x480000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x3, 0x1f, 0x6, 0xffff0000, 0x2, 0x101], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={0xffffffffffffffff, r3}, 0xc) syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x40402) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) syz_open_dev$loop(&(0x7f0000000100), 0x1, 0x8080) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000200), 0x480000, 0x0) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x3, 0x1f, 0x6, 0xffff0000, 0x2, 0x101], 0x6, 0x80000}) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={0xffffffffffffffff, r3}, 0xc) (async) 09:40:36 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000000)={0x3, 0x1, 0x3, 0xbbbbbbbb}) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48}, 0x20004004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48}, 0x20004004) (async) 09:40:36 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7b6, 0x9, 0x40], 0x3, 0x0, 0x0, 0xffffffffffffffff}) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, &(0x7f00000000c0)={0x10000, 0x9}) 09:40:36 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x33}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4080) (async, rerun: 32) socketpair(0x23, 0x0, 0x100000, 0x0) (rerun: 32) 09:40:36 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x4, 0x70bd39, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:nvram_device_t:s0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x2400e880}, 0x40) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000140)={0x1, 0x9, 0x7b, 0x7}) 09:40:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:36 executing program 5: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x7ff, 0x5d7c02) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000000c0)) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000040)=0x60b) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000000)) 09:40:36 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x4, 0x70bd39, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:nvram_device_t:s0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x2400e880}, 0x40) (async) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000140)={0x1, 0x9, 0x7b, 0x7}) 09:40:36 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async, rerun: 32) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (rerun: 32) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000000)={0x3, 0x1, 0x3, 0xbbbbbbbb}) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:36 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0x1b, 0x4, 0xc, 0x10, "34a8cba757791b03c4596284c1ee1fa9cd0a39475e9648b5aaac7225dac9fda1052f6021fa50ba388cd2296b413e423652e99fba167f2ea88fef9bc801bff6f1", "6d31cd7bfef3d602021110013e708b115c8db16908d5d252627f8023587cead0", [0x89d6, 0x8a8b46f]}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000000140)={'dvmrp1\x00', 0x401, 0xffff}) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 09:40:36 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:36 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x4, 0x70bd39, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:nvram_device_t:s0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x2400e880}, 0x40) (async) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000140)={0x1, 0x9, 0x7b, 0x7}) 09:40:36 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7b6, 0x9, 0x40], 0x3, 0x0, 0x0, 0xffffffffffffffff}) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, &(0x7f00000000c0)={0x10000, 0x9}) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7b6, 0x9, 0x40], 0x3}) (async) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, &(0x7f00000000c0)={0x10000, 0x9}) (async) 09:40:36 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0}, 0x40080) 09:40:36 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) (async) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0x1b, 0x4, 0xc, 0x10, "34a8cba757791b03c4596284c1ee1fa9cd0a39475e9648b5aaac7225dac9fda1052f6021fa50ba388cd2296b413e423652e99fba167f2ea88fef9bc801bff6f1", "6d31cd7bfef3d602021110013e708b115c8db16908d5d252627f8023587cead0", [0x89d6, 0x8a8b46f]}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) (async) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000000140)={'dvmrp1\x00', 0x401, 0xffff}) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 09:40:37 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0}, 0x40080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0}, 0x40080) (async) 09:40:37 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000000)={0x3, 0x1, 0x3, 0xbbbbbbbb}) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:37 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7b6, 0x9, 0x40], 0x3, 0x0, 0x0, 0xffffffffffffffff}) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, &(0x7f00000000c0)={0x10000, 0x9}) 09:40:37 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) (async, rerun: 64) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0x1b, 0x4, 0xc, 0x10, "34a8cba757791b03c4596284c1ee1fa9cd0a39475e9648b5aaac7225dac9fda1052f6021fa50ba388cd2296b413e423652e99fba167f2ea88fef9bc801bff6f1", "6d31cd7bfef3d602021110013e708b115c8db16908d5d252627f8023587cead0", [0x89d6, 0x8a8b46f]}) (async, rerun: 64) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) (async) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000000140)={'dvmrp1\x00', 0x401, 0xffff}) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 09:40:37 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:37 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000080)) socketpair(0x23, 0x0, 0x100000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7fff, 0x3a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x40, 0x700, 0x1ff, 0x800, {{0x6, 0x4, 0x3, 0x6, 0x18, 0x67, 0x0, 0x1f, 0x4, 0x0, @loopback, @local, {[@end]}}}}}) 09:40:37 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0}, 0x40080) 09:40:37 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000080)) socketpair(0x23, 0x0, 0x100000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7fff, 0x3a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x40, 0x700, 0x1ff, 0x800, {{0x6, 0x4, 0x3, 0x6, 0x18, 0x67, 0x0, 0x1f, 0x4, 0x0, @loopback, @local, {[@end]}}}}}) 09:40:37 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000280)={'veth1_macvtap\x00', 0x1, 0x73b4}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) recvfrom$x25(r1, &(0x7f0000000140)=""/80, 0x50, 0x60, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) ioctl$BLKFRASET(r1, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 09:40:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 09:40:37 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000200)=""/158) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:37 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000200)=""/158) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:37 executing program 3: sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:37 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000280)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) recvfrom$x25(r1, &(0x7f0000000140)=""/80, 0x50, 0x60, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) (async) ioctl$BLKFRASET(r1, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async, rerun: 32) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 09:40:37 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000080)) socketpair(0x23, 0x0, 0x100000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7fff, 0x3a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x40, 0x700, 0x1ff, 0x800, {{0x6, 0x4, 0x3, 0x6, 0x18, 0x67, 0x0, 0x1f, 0x4, 0x0, @loopback, @local, {[@end]}}}}}) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) (async) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000080)) (async) socketpair(0x23, 0x0, 0x100000, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7fff, 0x3a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x4000) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x40, 0x700, 0x1ff, 0x800, {{0x6, 0x4, 0x3, 0x6, 0x18, 0x67, 0x0, 0x1f, 0x4, 0x0, @loopback, @local, {[@end]}}}}}) (async) 09:40:37 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x1, 0x8) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f00000000c0)={0x200}) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) 09:40:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x98, r2, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bond\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg2\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:ldconfig_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000400)=0x401, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:apt_lock_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x888}, 0x8040) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="14002193edffb27cbcf61bd7690617000076fab0bba7022693a4f30e886bb3a11469c2c386285a1970925d78b1fd57f26e41bb12b3ba0965fa2b289ca8950d27a9e88d5c3976cfd63fc1b7f7631b435632e53ccabe8895e323fc23115a70a0a16f1bb7c01edd0ccaab1e52beacfd36cb38b5609a05a6ee1730c98016cb4a0a5fccc57d1a28629484baac7fb709149c16a400a60318ed495650a8b02a58158a", @ANYRES16=0x0, @ANYBLOB="b3ba000000000000000003000000"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0}, 0x0) 09:40:37 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000200)=""/158) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000200)=""/158) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 09:40:37 executing program 3: sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:37 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000280)={'veth1_macvtap\x00', 0x1, 0x73b4}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) recvfrom$x25(r1, &(0x7f0000000140)=""/80, 0x50, 0x60, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) ioctl$BLKFRASET(r1, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000280)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) recvfrom$x25(r1, &(0x7f0000000140)=""/80, 0x50, 0x60, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) (async) ioctl$BLKFRASET(r1, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) (async) 09:40:37 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000000)=0xffff, 0x4) socketpair(0x23, 0x0, 0x100000, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) socketpair(0x5, 0x80000, 0x5, &(0x7f0000000200)={0xffffffffffffffff}) r3 = accept$netrom(r2, &(0x7f0000000240)={{0x3, @netrom}, [@rose, @default, @remote, @default, @default, @rose, @default, @default]}, &(0x7f0000000140)=0x48) connect$netrom(r3, &(0x7f0000000180)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) 09:40:38 executing program 3: sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:38 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000000)=0xffff, 0x4) (async) socketpair(0x23, 0x0, 0x100000, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) (async) socketpair(0x5, 0x80000, 0x5, &(0x7f0000000200)={0xffffffffffffffff}) r3 = accept$netrom(r2, &(0x7f0000000240)={{0x3, @netrom}, [@rose, @default, @remote, @default, @default, @rose, @default, @default]}, &(0x7f0000000140)=0x48) connect$netrom(r3, &(0x7f0000000180)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) 09:40:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048011}, 0xc0a5) 09:40:38 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000080)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20c0}, 0x20048840) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @broadcast, @empty}, &(0x7f0000000040)=0xc) 09:40:38 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x800, 0x12, 0x2, 0x0, "9393ada94cafcd48b3f732cb6b9efe74f62cf1bf1e381c77f29e82533a19e446eb92dc826892d97726184bf5d68375cddcca707a99c763e2cbdb6ec1a93b9bc7", "867a995942c31052ef5a05bef1c150be61b181d354dda7769f0b2b907022d26d", [0x40000000000000, 0xff]}) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:38 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f00000003c0)={'geneve0\x00', 0x85c, 0x1}) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x6, 0x8000}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:38 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x1, 0x8) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f00000000c0)={0x200}) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r1, 0x1264, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x1, 0x8) (async) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f00000000c0)={0x200}) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) (async) 09:40:38 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000280)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000140)={0x12, "a9a9ab8d56a9aac5f33819c181ba70aca39aaccb41f06f62afde2b95d6fc3ff0cdee44779617f980b89025af8cc693cf5ada346c5f255cc0542c09e3604916407fb59db63bf5417666a59404f142d70c4fe712febacb6e62927efb114e78051f7e977d4e8043692ff6e9167e9aaf5a89c243824d768427e9a4a3093ef6f37d51"}) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f00000003c0)={0x6d, "0aff16b6f327f31c28f1311f5cbfaa220fb50c91f0951879592c0ceec165469cfba29781c506519b426f5105e39888ef3b2552b1b8d67563e36c1c629386b7bff3162c9d95ceeeb115172218c8d6936f6d4c8071c4704d04c57833bcf2d6046c6d9c7b70decb8396855b95187c6c92f796457694026964d7eedd2e3900d912b4"}) ioctl$BLKFRASET(r2, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000480)) connect$netrom(0xffffffffffffffff, 0x0, 0x0) r5 = openat$md(0xffffffffffffff9c, &(0x7f00000004c0), 0x28000, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000500)={0xff, 0x7, 0x4, 0x5}) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) 09:40:38 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000080)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20c0}, 0x20048840) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @broadcast, @empty}, &(0x7f0000000040)=0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000080)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20c0}, 0x20048840) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @broadcast, @empty}, &(0x7f0000000040)=0xc) (async) 09:40:38 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000000)=0xffff, 0x4) (async) socketpair(0x23, 0x0, 0x100000, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) (async) socketpair(0x5, 0x80000, 0x5, &(0x7f0000000200)={0xffffffffffffffff}) r3 = accept$netrom(r2, &(0x7f0000000240)={{0x3, @netrom}, [@rose, @default, @remote, @default, @default, @rose, @default, @default]}, &(0x7f0000000140)=0x48) connect$netrom(r3, &(0x7f0000000180)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) 09:40:38 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f00000003c0)={'geneve0\x00', 0x85c, 0x1}) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x6, 0x8000}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:38 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000280)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000140)={0x12, "a9a9ab8d56a9aac5f33819c181ba70aca39aaccb41f06f62afde2b95d6fc3ff0cdee44779617f980b89025af8cc693cf5ada346c5f255cc0542c09e3604916407fb59db63bf5417666a59404f142d70c4fe712febacb6e62927efb114e78051f7e977d4e8043692ff6e9167e9aaf5a89c243824d768427e9a4a3093ef6f37d51"}) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f00000003c0)={0x6d, "0aff16b6f327f31c28f1311f5cbfaa220fb50c91f0951879592c0ceec165469cfba29781c506519b426f5105e39888ef3b2552b1b8d67563e36c1c629386b7bff3162c9d95ceeeb115172218c8d6936f6d4c8071c4704d04c57833bcf2d6046c6d9c7b70decb8396855b95187c6c92f796457694026964d7eedd2e3900d912b4"}) ioctl$BLKFRASET(r2, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000480)) connect$netrom(0xffffffffffffffff, 0x0, 0x0) r5 = openat$md(0xffffffffffffff9c, &(0x7f00000004c0), 0x28000, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000500)={0xff, 0x7, 0x4, 0x5}) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) 09:40:38 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x800, 0x12, 0x2, 0x0, "9393ada94cafcd48b3f732cb6b9efe74f62cf1bf1e381c77f29e82533a19e446eb92dc826892d97726184bf5d68375cddcca707a99c763e2cbdb6ec1a93b9bc7", "867a995942c31052ef5a05bef1c150be61b181d354dda7769f0b2b907022d26d", [0x40000000000000, 0xff]}) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x800, 0x12, 0x2, 0x0, "9393ada94cafcd48b3f732cb6b9efe74f62cf1bf1e381c77f29e82533a19e446eb92dc826892d97726184bf5d68375cddcca707a99c763e2cbdb6ec1a93b9bc7", "867a995942c31052ef5a05bef1c150be61b181d354dda7769f0b2b907022d26d", [0x40000000000000, 0xff]}) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 09:40:38 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f00000003c0)={'geneve0\x00', 0x85c, 0x1}) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x6, 0x8000}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:38 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000280)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000140)={0x12, "a9a9ab8d56a9aac5f33819c181ba70aca39aaccb41f06f62afde2b95d6fc3ff0cdee44779617f980b89025af8cc693cf5ada346c5f255cc0542c09e3604916407fb59db63bf5417666a59404f142d70c4fe712febacb6e62927efb114e78051f7e977d4e8043692ff6e9167e9aaf5a89c243824d768427e9a4a3093ef6f37d51"}) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f00000003c0)={0x6d, "0aff16b6f327f31c28f1311f5cbfaa220fb50c91f0951879592c0ceec165469cfba29781c506519b426f5105e39888ef3b2552b1b8d67563e36c1c629386b7bff3162c9d95ceeeb115172218c8d6936f6d4c8071c4704d04c57833bcf2d6046c6d9c7b70decb8396855b95187c6c92f796457694026964d7eedd2e3900d912b4"}) ioctl$BLKFRASET(r2, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000480)) connect$netrom(0xffffffffffffffff, 0x0, 0x0) r5 = openat$md(0xffffffffffffff9c, &(0x7f00000004c0), 0x28000, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000500)={0xff, 0x7, 0x4, 0x5}) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) 09:40:38 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000080)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20c0}, 0x20048840) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @broadcast, @empty}, &(0x7f0000000040)=0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000080)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20c0}, 0x20048840) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @broadcast, @empty}, &(0x7f0000000040)=0xc) (async) 09:40:38 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10, 0x800) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, @default, @rose={'rose', 0x0}, 0x4ee, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x65e8, 0x6, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) 09:40:38 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x1, 0x8) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f00000000c0)={0x200}) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r1, 0x1264, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x1, 0x8) (async) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f00000000c0)={0x200}) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) (async) 09:40:38 executing program 5: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) sendto$x25(r0, &(0x7f00000003c0)="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", 0x1000, 0x20000800, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = semget$private(0x0, 0x0, 0x21) semctl$SEM_STAT(r2, 0x4, 0x12, &(0x7f0000000140)=""/86) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f00000013c0)) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f00000000c0)=0x1, 0x4) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r4, 0x4c00, r1) 09:40:38 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10, 0x800) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) (async) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, @default, @rose={'rose', 0x0}, 0x4ee, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x65e8, 0x6, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) 09:40:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip_vti0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48090}, 0x41) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) 09:40:38 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x800, 0x12, 0x2, 0x0, "9393ada94cafcd48b3f732cb6b9efe74f62cf1bf1e381c77f29e82533a19e446eb92dc826892d97726184bf5d68375cddcca707a99c763e2cbdb6ec1a93b9bc7", "867a995942c31052ef5a05bef1c150be61b181d354dda7769f0b2b907022d26d", [0x40000000000000, 0xff]}) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:38 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'macvlan1\x00', 0x52f5, 0x73b5}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip_vti0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48090}, 0x41) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) 09:40:38 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10, 0x800) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, @default, @rose={'rose', 0x0}, 0x4ee, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x65e8, 0x6, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) socketpair(0x23, 0x0, 0x100000, 0x0) (async) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10, 0x800) (async) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) (async) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, @default, @rose={'rose', 0x0}, 0x4ee, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x65e8, 0x6, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) (async) 09:40:38 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:38 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:38 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'macvlan1\x00', 0x52f5, 0x73b5}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async, rerun: 32) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async, rerun: 32) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:38 executing program 5: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x4200) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:38 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0xd0, 0x10, 0x7fff, 0x6, {{0x18, 0x4, 0x0, 0xe, 0x60, 0x68, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x28, 0xad, 0x0, 0x1, [0x1, 0x80000000, 0x1f, 0x2, 0x1ff, 0x3, 0x0, 0x3f, 0xd3d]}, @generic={0x7, 0x4, "9b2c"}, @lsrr={0x83, 0x1f, 0x9b, [@multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x12}, @multicast2, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x30}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x20, 0x1, 0x20, 0x400, {{0x14, 0x4, 0x3, 0x3, 0x50, 0x66, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1f, 0xee, [@private=0xa010100, @private=0xa010102, @private=0xa010101, @empty, @broadcast, @private=0xa010100, @broadcast]}, @timestamp_addr={0x44, 0xc, 0xde, 0x1, 0xa, [{@remote, 0x7}]}, @ssrr={0x89, 0xb, 0x2f, [@multicast1, @dev={0xac, 0x14, 0x14, 0x41}]}]}}}}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', r0, 0x29, 0x3, 0x7, 0x5, 0x43, @dev={0xfe, 0x80, '\x00', 0x3d}, @empty, 0x8000, 0x0, 0x3, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'gre0\x00', r2, 0x7800, 0xa8dbd825e3103c06, 0x81, 0x6, {{0xb, 0x4, 0x0, 0x39, 0x2c, 0x65, 0x0, 0x9, 0x2f, 0x0, @multicast1, @empty, {[@timestamp_prespec={0x44, 0x14, 0xa2, 0x3, 0x3, [{@empty, 0x4432}, {@multicast2, 0x1}]}, @end, @noop]}}}}}) 09:40:38 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async, rerun: 32) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip_vti0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48090}, 0x41) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip_vti0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48090}, 0x41) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) (async) 09:40:38 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x4200) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4c, 0x1, 0xc, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0xffffffffffffffff, 0xa6cc]}) 09:40:38 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0xd0, 0x10, 0x7fff, 0x6, {{0x18, 0x4, 0x0, 0xe, 0x60, 0x68, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x28, 0xad, 0x0, 0x1, [0x1, 0x80000000, 0x1f, 0x2, 0x1ff, 0x3, 0x0, 0x3f, 0xd3d]}, @generic={0x7, 0x4, "9b2c"}, @lsrr={0x83, 0x1f, 0x9b, [@multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x12}, @multicast2, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x30}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x20, 0x1, 0x20, 0x400, {{0x14, 0x4, 0x3, 0x3, 0x50, 0x66, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1f, 0xee, [@private=0xa010100, @private=0xa010102, @private=0xa010101, @empty, @broadcast, @private=0xa010100, @broadcast]}, @timestamp_addr={0x44, 0xc, 0xde, 0x1, 0xa, [{@remote, 0x7}]}, @ssrr={0x89, 0xb, 0x2f, [@multicast1, @dev={0xac, 0x14, 0x14, 0x41}]}]}}}}}) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', r0, 0x29, 0x3, 0x7, 0x5, 0x43, @dev={0xfe, 0x80, '\x00', 0x3d}, @empty, 0x8000, 0x0, 0x3, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'gre0\x00', r2, 0x7800, 0xa8dbd825e3103c06, 0x81, 0x6, {{0xb, 0x4, 0x0, 0x39, 0x2c, 0x65, 0x0, 0x9, 0x2f, 0x0, @multicast1, @empty, {[@timestamp_prespec={0x44, 0x14, 0xa2, 0x3, 0x3, [{@empty, 0x4432}, {@multicast2, 0x1}]}, @end, @noop]}}}}}) 09:40:38 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) 09:40:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x901c0d}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:random_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:boot_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bridge\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:38 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0xd0, 0x10, 0x7fff, 0x6, {{0x18, 0x4, 0x0, 0xe, 0x60, 0x68, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x28, 0xad, 0x0, 0x1, [0x1, 0x80000000, 0x1f, 0x2, 0x1ff, 0x3, 0x0, 0x3f, 0xd3d]}, @generic={0x7, 0x4, "9b2c"}, @lsrr={0x83, 0x1f, 0x9b, [@multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x12}, @multicast2, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x30}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x20, 0x1, 0x20, 0x400, {{0x14, 0x4, 0x3, 0x3, 0x50, 0x66, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1f, 0xee, [@private=0xa010100, @private=0xa010102, @private=0xa010101, @empty, @broadcast, @private=0xa010100, @broadcast]}, @timestamp_addr={0x44, 0xc, 0xde, 0x1, 0xa, [{@remote, 0x7}]}, @ssrr={0x89, 0xb, 0x2f, [@multicast1, @dev={0xac, 0x14, 0x14, 0x41}]}]}}}}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', r0, 0x29, 0x3, 0x7, 0x5, 0x43, @dev={0xfe, 0x80, '\x00', 0x3d}, @empty, 0x8000, 0x0, 0x3, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'gre0\x00', r2, 0x7800, 0xa8dbd825e3103c06, 0x81, 0x6, {{0xb, 0x4, 0x0, 0x39, 0x2c, 0x65, 0x0, 0x9, 0x2f, 0x0, @multicast1, @empty, {[@timestamp_prespec={0x44, 0x14, 0xa2, 0x3, 0x3, [{@empty, 0x4432}, {@multicast2, 0x1}]}, @end, @noop]}}}}}) socketpair(0x23, 0x0, 0x100000, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0xd0, 0x10, 0x7fff, 0x6, {{0x18, 0x4, 0x0, 0xe, 0x60, 0x68, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x28, 0xad, 0x0, 0x1, [0x1, 0x80000000, 0x1f, 0x2, 0x1ff, 0x3, 0x0, 0x3f, 0xd3d]}, @generic={0x7, 0x4, "9b2c"}, @lsrr={0x83, 0x1f, 0x9b, [@multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x12}, @multicast2, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x30}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x20, 0x1, 0x20, 0x400, {{0x14, 0x4, 0x3, 0x3, 0x50, 0x66, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1f, 0xee, [@private=0xa010100, @private=0xa010102, @private=0xa010101, @empty, @broadcast, @private=0xa010100, @broadcast]}, @timestamp_addr={0x44, 0xc, 0xde, 0x1, 0xa, [{@remote, 0x7}]}, @ssrr={0x89, 0xb, 0x2f, [@multicast1, @dev={0xac, 0x14, 0x14, 0x41}]}]}}}}}) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', r0, 0x29, 0x3, 0x7, 0x5, 0x43, @dev={0xfe, 0x80, '\x00', 0x3d}, @empty, 0x8000, 0x0, 0x3, 0x3}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'gre0\x00', r2, 0x7800, 0xa8dbd825e3103c06, 0x81, 0x6, {{0xb, 0x4, 0x0, 0x39, 0x2c, 0x65, 0x0, 0x9, 0x2f, 0x0, @multicast1, @empty, {[@timestamp_prespec={0x44, 0x14, 0xa2, 0x3, 0x3, [{@empty, 0x4432}, {@multicast2, 0x1}]}, @end, @noop]}}}}}) (async) 09:40:38 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (rerun: 32) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async, rerun: 32) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:38 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'macvlan1\x00', 0x52f5, 0x73b5}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async, rerun: 32) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) (async, rerun: 32) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async, rerun: 32) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async, rerun: 32) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (rerun: 32) 09:40:38 executing program 5: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000040)) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x8000) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000140)) 09:40:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x901c0d}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:random_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:boot_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bridge\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) (async, rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (rerun: 32) 09:40:38 executing program 0: socketpair(0x23, 0x6, 0xffffffc0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)) connect$x25(0xffffffffffffffff, &(0x7f0000000180)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000380)=""/118, 0x76, 0x10101, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000200)={0x33, "10b51c0e08bb483c5366875ec3f5802f196f7391c68d817d28ce28122bd7fc8e7a65868f7d68e45435a27ba9384b57bad397472c4b2bc526714896406c02e0911826c3a225af1323feb866c895f606d4830d14116e5ed158f04052152857d0db865ca855999b0c74df615f67c88f307453b772b558c61175f511ae1738604bde"}) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={'ipvlan1\x00', 0x3, 0x2}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000340)={0x0, 0x5}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000140)=[0x6], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000300)={0x7f, 0x3ff, 0x8005, 0x8, 0x9, 0x1, 0xa, "63f03eeb1c772923d63571c28fe043a6487592cb", "cd9892772a5f98ec80ba8bc390f057b242a94eef"}) 09:40:38 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b8}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) read$usbmon(r0, &(0x7f00000003c0)=""/201, 0xc9) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r3 = accept4$x25(r0, &(0x7f0000000000)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x400) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000140)={0x2a, "03269b49900bfb350f0722d23854201b9058b2377a41a27b3cfed3da00c086cfa37ad987432adeac6746caaa952e527d910a99b1560a2ac1ffea056b6d31e9f9741583b5566438a732d6db3e1ce82478ca2e71a4c058e490b6929ac7f47b12e7a719fc553e86e68d4147641af25fd046303b36283dc62d29d549a4a447d9795e"}) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:38 executing program 0: socketpair(0x23, 0x6, 0xffffffc0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)) (async) connect$x25(0xffffffffffffffff, &(0x7f0000000180)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) (async) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000380)=""/118, 0x76, 0x10101, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) (async) ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000200)={0x33, "10b51c0e08bb483c5366875ec3f5802f196f7391c68d817d28ce28122bd7fc8e7a65868f7d68e45435a27ba9384b57bad397472c4b2bc526714896406c02e0911826c3a225af1323feb866c895f606d4830d14116e5ed158f04052152857d0db865ca855999b0c74df615f67c88f307453b772b558c61175f511ae1738604bde"}) (async) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={'ipvlan1\x00', 0x3, 0x2}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000340)={0x0, 0x5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000140)=[0x6], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000300)={0x7f, 0x3ff, 0x8005, 0x8, 0x9, 0x1, 0xa, "63f03eeb1c772923d63571c28fe043a6487592cb", "cd9892772a5f98ec80ba8bc390f057b242a94eef"}) 09:40:38 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x20c03, 0x0) 09:40:38 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b8}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) read$usbmon(r0, &(0x7f00000003c0)=""/201, 0xc9) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r3 = accept4$x25(r0, &(0x7f0000000000)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x400) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000140)={0x2a, "03269b49900bfb350f0722d23854201b9058b2377a41a27b3cfed3da00c086cfa37ad987432adeac6746caaa952e527d910a99b1560a2ac1ffea056b6d31e9f9741583b5566438a732d6db3e1ce82478ca2e71a4c058e490b6929ac7f47b12e7a719fc553e86e68d4147641af25fd046303b36283dc62d29d549a4a447d9795e"}) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b8}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) read$usbmon(r0, &(0x7f00000003c0)=""/201, 0xc9) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) accept4$x25(r0, &(0x7f0000000000)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x400) (async) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000140)={0x2a, "03269b49900bfb350f0722d23854201b9058b2377a41a27b3cfed3da00c086cfa37ad987432adeac6746caaa952e527d910a99b1560a2ac1ffea056b6d31e9f9741583b5566438a732d6db3e1ce82478ca2e71a4c058e490b6929ac7f47b12e7a719fc553e86e68d4147641af25fd046303b36283dc62d29d549a4a447d9795e"}) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) 09:40:39 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async, rerun: 32) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (rerun: 32) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x901c0d}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:random_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:boot_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bridge\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:39 executing program 0: socketpair(0x23, 0x6, 0xffffffc0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)) (async) connect$x25(0xffffffffffffffff, &(0x7f0000000180)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000380)=""/118, 0x76, 0x10101, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) (async, rerun: 64) ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000200)={0x33, "10b51c0e08bb483c5366875ec3f5802f196f7391c68d817d28ce28122bd7fc8e7a65868f7d68e45435a27ba9384b57bad397472c4b2bc526714896406c02e0911826c3a225af1323feb866c895f606d4830d14116e5ed158f04052152857d0db865ca855999b0c74df615f67c88f307453b772b558c61175f511ae1738604bde"}) (async, rerun: 64) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={'ipvlan1\x00', 0x3, 0x2}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000340)={0x0, 0x5}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000140)=[0x6], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000300)={0x7f, 0x3ff, 0x8005, 0x8, 0x9, 0x1, 0xa, "63f03eeb1c772923d63571c28fe043a6487592cb", "cd9892772a5f98ec80ba8bc390f057b242a94eef"}) 09:40:39 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x406, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xfffffffffffffffe}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x80}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4840}, 0x4004010) 09:40:39 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x406, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xfffffffffffffffe}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x80}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4840}, 0x4004010) 09:40:39 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) (fail_nth: 1) 09:40:39 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xa7e, 0x0, 0x4, 0x400], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000140)={0xffffff41, 0x9, {}, {0xee01}, 0x0, 0x401}) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:39 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x20c03, 0x0) 09:40:39 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x406, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xfffffffffffffffe}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x80}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4840}, 0x4004010) 09:40:39 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000040)={&(0x7f0000000000)=[0x1f, 0x41], 0x2, 0x80000001, 0x3ff, 0x7, 0x337, 0xfffffff7, 0xfff, {0x8000, 0x6, 0xffff, 0x6, 0x8, 0x200, 0x8, 0xcc, 0x140, 0x6, 0x3, 0x800, 0x6, 0x5, "329c8f9f26465dd0e715de1aa967f54db37ce1d2ff4084b47fce5b256edfc4d7"}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x400082, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000140)='\x00') 09:40:39 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000040)={&(0x7f0000000000)=[0x1f, 0x41], 0x2, 0x80000001, 0x3ff, 0x7, 0x337, 0xfffffff7, 0xfff, {0x8000, 0x6, 0xffff, 0x6, 0x8, 0x200, 0x8, 0xcc, 0x140, 0x6, 0x3, 0x800, 0x6, 0x5, "329c8f9f26465dd0e715de1aa967f54db37ce1d2ff4084b47fce5b256edfc4d7"}}) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x400082, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000140)='\x00') 09:40:39 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b8}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) read$usbmon(r0, &(0x7f00000003c0)=""/201, 0xc9) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r3 = accept4$x25(r0, &(0x7f0000000000)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x400) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000140)={0x2a, "03269b49900bfb350f0722d23854201b9058b2377a41a27b3cfed3da00c086cfa37ad987432adeac6746caaa952e527d910a99b1560a2ac1ffea056b6d31e9f9741583b5566438a732d6db3e1ce82478ca2e71a4c058e490b6929ac7f47b12e7a719fc553e86e68d4147641af25fd046303b36283dc62d29d549a4a447d9795e"}) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:39 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@netrom, @null, @default, @null, @null, @remote, @rose, @netrom]}, &(0x7f0000000080)=0x48, 0x80000) 09:40:39 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xa7e, 0x0, 0x4, 0x400], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000140)={0xffffff41, 0x9, {}, {0xee01}, 0x0, 0x401}) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xa7e, 0x0, 0x4, 0x400], 0x4, 0x80800}) (async) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000140)={0xffffff41, 0x9, {}, {0xee01}, 0x0, 0x401}) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) 09:40:39 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@netrom, @null, @default, @null, @null, @remote, @rose, @netrom]}, &(0x7f0000000080)=0x48, 0x80000) 09:40:39 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000040)={&(0x7f0000000000)=[0x1f, 0x41], 0x2, 0x80000001, 0x3ff, 0x7, 0x337, 0xfffffff7, 0xfff, {0x8000, 0x6, 0xffff, 0x6, 0x8, 0x200, 0x8, 0xcc, 0x140, 0x6, 0x3, 0x800, 0x6, 0x5, "329c8f9f26465dd0e715de1aa967f54db37ce1d2ff4084b47fce5b256edfc4d7"}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x400082, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000140)='\x00') 09:40:39 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x212000, 0x0) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000180)) 09:40:39 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x20c03, 0x0) 09:40:39 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f00000003c0)={'pim6reg\x00', 0x5f17, 0x8001}) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) 09:40:39 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@netrom, @null, @default, @null, @null, @remote, @rose, @netrom]}, &(0x7f0000000080)=0x48, 0x80000) 09:40:39 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xa7e, 0x0, 0x4, 0x400], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000140)={0xffffff41, 0x9, {}, {0xee01}, 0x0, 0x401}) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xa7e, 0x0, 0x4, 0x400], 0x4, 0x80800}) (async) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000140)={0xffffff41, 0x9, {}, {0xee01}, 0x0, 0x401}) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) 09:40:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:depmod_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0xc840) 09:40:39 executing program 0: socketpair(0x8, 0x800, 0x5, 0x0) 09:40:39 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:39 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f00000003c0)={'pim6reg\x00', 0x5f17, 0x8001}) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000240)) (async, rerun: 32) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) 09:40:39 executing program 0: socketpair(0x8, 0x800, 0x5, 0x0) 09:40:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:depmod_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0xc840) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x201}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:depmod_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0xc840) (async) 09:40:39 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) (async) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x212000, 0x0) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000180)) 09:40:39 executing program 0: socketpair(0x8, 0x800, 0x5, 0x0) socketpair(0x8, 0x800, 0x5, 0x0) (async) 09:40:39 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) (async, rerun: 32) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async, rerun: 32) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:depmod_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0xc840) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x201}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:depmod_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0xc840) (async) 09:40:39 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f00000003c0)={'pim6reg\x00', 0x5f17, 0x8001}) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) (async) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f00000003c0)={'pim6reg\x00', 0x5f17, 0x8001}) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) (async) 09:40:39 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000000)) 09:40:39 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x111900, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9a62, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) socketpair(0x23, 0x0, 0x100000, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 09:40:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x17}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:39 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:39 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f00000000c0)={0x2, 0x8, 0x22, 0x8, 0x3, 0x5, 0x6, 0x1, 0x1}) ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, &(0x7f0000000000)={0x20, 0x5}) 09:40:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x17}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:39 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x111900, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9a62, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) socketpair(0x23, 0x0, 0x100000, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x111900, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9a62, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) socketpair(0x23, 0x0, 0x100000, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) 09:40:39 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) (async) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x212000, 0x0) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000180)) 09:40:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x17}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) (async, rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (rerun: 64) 09:40:39 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000000)) 09:40:39 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x111900, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9a62, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) socketpair(0x23, 0x0, 0x100000, 0x0) (async, rerun: 32) socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) 09:40:39 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f00000000c0)={0x2, 0x8, 0x22, 0x8, 0x3, 0x5, 0x6, 0x1, 0x1}) ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, &(0x7f0000000000)={0x20, 0x5}) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x0) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f00000000c0)={0x2, 0x8, 0x22, 0x8, 0x3, 0x5, 0x6, 0x1, 0x1}) (async) ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, &(0x7f0000000000)={0x20, 0x5}) (async) 09:40:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x84}, 0x24000001) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:39 executing program 1: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x1e7b, 0x111000) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000300)=0xf9c3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x248442, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$BLKFRASET(r3, 0x1264, &(0x7f00000002c0)=0xa6) r4 = syz_open_dev$loop(&(0x7f0000000200), 0x20, 0x181082) ioctl$BLKGETSIZE(r4, 0x1260, &(0x7f0000000240)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000000)) 09:40:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x84}, 0x24000001) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x201}, 0x14}}, 0x0) (async, rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (rerun: 32) 09:40:39 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f00000001c0)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)) 09:40:39 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000000)) 09:40:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x84}, 0x24000001) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:40 executing program 1: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x1e7b, 0x111000) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000300)=0xf9c3) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x248442, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$BLKFRASET(r3, 0x1264, &(0x7f00000002c0)=0xa6) r4 = syz_open_dev$loop(&(0x7f0000000200), 0x20, 0x181082) ioctl$BLKGETSIZE(r4, 0x1260, &(0x7f0000000240)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000000)) 09:40:40 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x101180) 09:40:40 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80141, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000040)=[0x5, 0x0, 0x2, 0x1, 0xc3, 0xfff, 0x8, 0x1]) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000080), 0xb7, 0x2) ioctl$BLKFRASET(r2, 0x1264, &(0x7f00000000c0)=0x1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0}, 0x24004040) 09:40:40 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x101180) 09:40:40 executing program 0: bind$x25(0xffffffffffffffff, &(0x7f0000000080)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) bind$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null, 0x5}, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default, @default, @default]}, 0x48) socketpair(0x23, 0x0, 0x100000, 0x0) 09:40:40 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f00000000c0)={0x2, 0x8, 0x22, 0x8, 0x3, 0x5, 0x6, 0x1, 0x1}) ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, &(0x7f0000000000)={0x20, 0x5}) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x0) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f00000000c0)={0x2, 0x8, 0x22, 0x8, 0x3, 0x5, 0x6, 0x1, 0x1}) (async) ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, &(0x7f0000000000)={0x20, 0x5}) (async) 09:40:40 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) (rerun: 32) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)) 09:40:40 executing program 1: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x1e7b, 0x111000) (async) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000300)=0xf9c3) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x248442, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) (async) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$BLKFRASET(r3, 0x1264, &(0x7f00000002c0)=0xa6) r4 = syz_open_dev$loop(&(0x7f0000000200), 0x20, 0x181082) ioctl$BLKGETSIZE(r4, 0x1260, &(0x7f0000000240)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000000)) 09:40:40 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80141, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000040)=[0x5, 0x0, 0x2, 0x1, 0xc3, 0xfff, 0x8, 0x1]) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000080), 0xb7, 0x2) ioctl$BLKFRASET(r2, 0x1264, &(0x7f00000000c0)=0x1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0}, 0x24004040) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80141, 0x0) (async) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000040)=[0x5, 0x0, 0x2, 0x1, 0xc3, 0xfff, 0x8, 0x1]) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$loop(&(0x7f0000000080), 0xb7, 0x2) (async) ioctl$BLKFRASET(r2, 0x1264, &(0x7f00000000c0)=0x1) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0}, 0x24004040) (async) 09:40:40 executing program 0: bind$x25(0xffffffffffffffff, &(0x7f0000000080)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) bind$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null, 0x5}, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default, @default, @default]}, 0x48) socketpair(0x23, 0x0, 0x100000, 0x0) bind$x25(0xffffffffffffffff, &(0x7f0000000080)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) (async) bind$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null, 0x5}, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default, @default, @default]}, 0x48) (async) socketpair(0x23, 0x0, 0x100000, 0x0) (async) 09:40:40 executing program 1: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000440)) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xcc, r4, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfffffffe}, {0x6, 0x16, 0x40}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0xf000}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x29078e71}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044000}, 0x20000081) 09:40:40 executing program 0: bind$x25(0xffffffffffffffff, &(0x7f0000000080)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) bind$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null, 0x5}, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default, @default, @default]}, 0x48) (async, rerun: 32) socketpair(0x23, 0x0, 0x100000, 0x0) (rerun: 32) 09:40:40 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x101180) 09:40:40 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) socketpair(0xa, 0x6, 0x4f1, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000140)={@broadcast, 0x1, 0x0, 0x40, 0x0, [{@private}, {@multicast1}, {@multicast2}, {@multicast2}]}}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) 09:40:40 executing program 1: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) (async) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000440)) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xcc, r4, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfffffffe}, {0x6, 0x16, 0x40}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0xf000}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x29078e71}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044000}, 0x20000081) 09:40:40 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x10005, 0x7c400) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x80000000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='dlm_lock_start\x00'}, 0x10) 09:40:40 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80141, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000040)=[0x5, 0x0, 0x2, 0x1, 0xc3, 0xfff, 0x8, 0x1]) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_open_dev$loop(&(0x7f0000000080), 0xb7, 0x2) ioctl$BLKFRASET(r2, 0x1264, &(0x7f00000000c0)=0x1) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0}, 0x24004040) 09:40:40 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) socketpair(0xa, 0x6, 0x4f1, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000140)={@broadcast, 0x1, 0x0, 0x40, 0x0, [{@private}, {@multicast1}, {@multicast2}, {@multicast2}]}}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) 09:40:41 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f00000001c0)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) (async) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)) (async) 09:40:41 executing program 1: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000440)) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xcc, r4, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfffffffe}, {0x6, 0x16, 0x40}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0xf000}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x29078e71}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044000}, 0x20000081) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) (async) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000440)) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xcc, r4, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfffffffe}, {0x6, 0x16, 0x40}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0xf000}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x29078e71}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044000}, 0x20000081) (async) 09:40:41 executing program 3: shmget(0x0, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:41 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x10005, 0x7c400) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) (async) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x80000000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='dlm_lock_start\x00'}, 0x10) (rerun: 64) 09:40:41 executing program 0: socketpair(0x8, 0x0, 0x100000, 0x0) 09:40:41 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async, rerun: 32) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) socketpair(0xa, 0x6, 0x4f1, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000140)={@broadcast, 0x1, 0x0, 0x40, 0x0, [{@private}, {@multicast1}, {@multicast2}, {@multicast2}]}}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async, rerun: 32) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) 09:40:41 executing program 3: shmget(0x0, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:41 executing program 0: socketpair(0x8, 0x0, 0x100000, 0x0) socketpair(0x8, 0x0, 0x100000, 0x0) (async) 09:40:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 09:40:41 executing program 0: socketpair(0x8, 0x0, 0x100000, 0x0) 09:40:41 executing program 3: shmget(0x0, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:41 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6965}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000100)=0x1, 0x4) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x53, 0x7, 0x6, 0xc, 0xfb}) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f00000000c0)) socket$inet_sctp(0x2, 0x1, 0x84) 09:40:41 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x18000) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) 09:40:41 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x10005, 0x7c400) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) (async) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x80000000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='dlm_lock_start\x00'}, 0x10) 09:40:41 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f00000003c0)={'lo\x00', 0x6, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x6, 0x3, 0x6, 0x2], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f00000004c0)={'wg0\x00', 0x7f, 0x8000}) 09:40:41 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6965}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000100)=0x1, 0x4) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x53, 0x7, 0x6, 0xc, 0xfb}) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f00000000c0)) (async) socket$inet_sctp(0x2, 0x1, 0x84) 09:40:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xb0, 0x0, 0x110, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_vlan\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:modules_dep_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x404c840}, 0x20040020) 09:40:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) 09:40:41 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6965}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000100)=0x1, 0x4) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x53, 0x7, 0x6, 0xc, 0xfb}) (async) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f00000000c0)) (async) socket$inet_sctp(0x2, 0x1, 0x84) 09:40:41 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000040)) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) 09:40:41 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f00000003c0)={'lo\x00', 0x6, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x6, 0x3, 0x6, 0x2], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f00000004c0)={'wg0\x00', 0x7f, 0x8000}) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r3, 0x1264, 0x0) (async) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f00000003c0)={'lo\x00', 0x6, 0x9}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x6, 0x3, 0x6, 0x2], 0x4, 0x80800}) (async) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f00000004c0)={'wg0\x00', 0x7f, 0x8000}) (async) 09:40:41 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x18000) (async) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) 09:40:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xb0, 0x0, 0x110, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_vlan\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:modules_dep_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x404c840}, 0x20040020) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xb0, 0x0, 0x110, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_vlan\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:modules_dep_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x404c840}, 0x20040020) (async) 09:40:41 executing program 0: socketpair(0x2, 0x800, 0x7ff, 0x0) socketpair(0x8, 0x3, 0x7, &(0x7f0000000340)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x80, 0x40, 0x5, 0x8, {{0x8, 0x4, 0x0, 0x1c, 0x20, 0x66, 0x0, 0x1, 0x29, 0x0, @remote, @empty, {[@generic={0x89, 0x9, "ebcc18def6e764"}]}}}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@exit, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1ae}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000080)='GPL\x00', 0x9, 0x8d, &(0x7f00000000c0)=""/141, 0x40f00, 0x5, '\x00', r0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xd, 0x3ff, 0xfffffff9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r2]}, 0x80) 09:40:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) 09:40:41 executing program 0: socketpair(0x2, 0x800, 0x7ff, 0x0) (async) socketpair(0x8, 0x3, 0x7, &(0x7f0000000340)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x80, 0x40, 0x5, 0x8, {{0x8, 0x4, 0x0, 0x1c, 0x20, 0x66, 0x0, 0x1, 0x29, 0x0, @remote, @empty, {[@generic={0x89, 0x9, "ebcc18def6e764"}]}}}}}) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@exit, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1ae}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000080)='GPL\x00', 0x9, 0x8d, &(0x7f00000000c0)=""/141, 0x40f00, 0x5, '\x00', r0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xd, 0x3ff, 0xfffffff9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r2]}, 0x80) 09:40:41 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x18000) (async) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) 09:40:41 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000040)) (async, rerun: 32) ioctl$LOOP_CLR_FD(r1, 0x4c01) (rerun: 32) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async, rerun: 64) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (rerun: 64) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) 09:40:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x5, 0x9, 0xba50, 0x7, 0x5, 0x0], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:41 executing program 0: socketpair(0x2, 0x800, 0x7ff, 0x0) socketpair(0x8, 0x3, 0x7, &(0x7f0000000340)) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x80, 0x40, 0x5, 0x8, {{0x8, 0x4, 0x0, 0x1c, 0x20, 0x66, 0x0, 0x1, 0x29, 0x0, @remote, @empty, {[@generic={0x89, 0x9, "ebcc18def6e764"}]}}}}}) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@exit, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1ae}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000080)='GPL\x00', 0x9, 0x8d, &(0x7f00000000c0)=""/141, 0x40f00, 0x5, '\x00', r0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xd, 0x3ff, 0xfffffff9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r2]}, 0x80) 09:40:41 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f00000003c0)={'lo\x00', 0x6, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x6, 0x3, 0x6, 0x2], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f00000004c0)={'wg0\x00', 0x7f, 0x8000}) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r3, 0x1264, 0x0) (async) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f00000003c0)={'lo\x00', 0x6, 0x9}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x6, 0x3, 0x6, 0x2], 0x4, 0x80800}) (async) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f00000004c0)={'wg0\x00', 0x7f, 0x8000}) (async) 09:40:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xb0, 0x0, 0x110, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_vlan\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:modules_dep_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x404c840}, 0x20040020) 09:40:41 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x201) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000000)=[0x3, 0x0, 0x2], 0x3, 0x80000000, 0xfff, 0x38c, 0x100, 0xfff, 0xc525, {0x3, 0x7, 0x9, 0x5, 0x1, 0x92b, 0x4, 0x2399, 0x20, 0x6, 0x2, 0x5, 0x4, 0x6e, "9580d38c67347e9c0d5359ac946b20173b0949639b0afd2c372eda04eeb6a046"}}) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000200)=[0xfff, 0x4, 0xaa1d, 0x4, 0x4, 0x0, 0xea3, 0x67be, 0x4], 0x9, 0x1ff, 0xb745, 0x0, 0xaac00000, 0x44a, 0x101, {0x2, 0xfff, 0x1000, 0x7, 0x0, 0xab5e, 0x9, 0x1, 0x8001, 0x0, 0xfffd, 0x1, 0x8, 0x4, "8cd381329f93d9c1bfc8c2a34d45a75b666beb155b36ea8554d52d15ad997ac3"}}) 09:40:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x5, 0x9, 0xba50, 0x7, 0x5, 0x0], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x5, 0x9, 0xba50, 0x7, 0x5, 0x0], 0x6, 0x80000}) (async) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 09:40:41 executing program 0: socketpair(0x23, 0x4, 0x100000, 0x0) 09:40:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x80, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2c}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:mount_tmp_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000880}, 0x15) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0x50}, 0x1, 0x0, 0x0, 0x844}, 0x24000000) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:41 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async, rerun: 64) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async, rerun: 64) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000040)) (async) ioctl$LOOP_CLR_FD(r1, 0x4c01) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async, rerun: 64) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (rerun: 64) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) 09:40:41 executing program 0: socketpair(0x23, 0x4, 0x100000, 0x0) 09:40:41 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000200)={0x0, 0x0, 0x10000}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x201}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x80, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2c}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:mount_tmp_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000880}, 0x15) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x201}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0x50}, 0x1, 0x0, 0x0, 0x844}, 0x24000000) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x5, 0x9, 0xba50, 0x7, 0x5, 0x0], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:41 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x201) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000000)=[0x3, 0x0, 0x2], 0x3, 0x80000000, 0xfff, 0x38c, 0x100, 0xfff, 0xc525, {0x3, 0x7, 0x9, 0x5, 0x1, 0x92b, 0x4, 0x2399, 0x20, 0x6, 0x2, 0x5, 0x4, 0x6e, "9580d38c67347e9c0d5359ac946b20173b0949639b0afd2c372eda04eeb6a046"}}) (rerun: 32) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000200)=[0xfff, 0x4, 0xaa1d, 0x4, 0x4, 0x0, 0xea3, 0x67be, 0x4], 0x9, 0x1ff, 0xb745, 0x0, 0xaac00000, 0x44a, 0x101, {0x2, 0xfff, 0x1000, 0x7, 0x0, 0xab5e, 0x9, 0x1, 0x8001, 0x0, 0xfffd, 0x1, 0x8, 0x4, "8cd381329f93d9c1bfc8c2a34d45a75b666beb155b36ea8554d52d15ad997ac3"}}) (rerun: 64) 09:40:42 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000200)={0x0, 0x0, 0x10000}) (async) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x201}, 0x14}}, 0x0) (async, rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x80, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2c}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:mount_tmp_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000880}, 0x15) (async, rerun: 32) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x201}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0x50}, 0x1, 0x0, 0x0, 0x844}, 0x24000000) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:42 executing program 0: socketpair(0x23, 0x4, 0x100000, 0x0) 09:40:42 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="9500000000001300"], &(0x7f0000000040)='GPL\x00', 0x1e5, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x8, 0x5, 0xd}, 0x10, 0x3442, 0xffffffffffffffff, 0x0, &(0x7f0000000180)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 09:40:42 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x8000000010c9, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x5, 0x0, 0x4, 0x10001, 0x5d38, 0x8, 0x0, 0x8000], 0x8, 0x800, 0x0, 0xffffffffffffffff}) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000002c0)) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, 0xfffffffffffffffd) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:42 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000200)={0x0, 0x0, 0x10000}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000200)={0x0, 0x0, 0x10000}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) 09:40:42 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) r0 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) r1 = accept4$netrom(r0, &(0x7f0000000440)={{0x3, @rose}, [@default, @netrom, @netrom, @bcast, @default, @netrom, @netrom, @bcast]}, &(0x7f0000000200)=0x48, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f00000004c0)=0xb, &(0x7f0000000240)=0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000600)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r3) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r4}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$BLKFRASET(r2, 0x1264, 0x0) r5 = accept4$x25(r2, &(0x7f0000000080)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x80000) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000500)={@null, 0xd, 'pimreg1\x00'}) ioctl$SIOCX25GSUBSCRIP(r5, 0x89e0, &(0x7f0000000100)={'xfrm0\x00', 0x800, 0x1}) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000000)={0x25, 0x1, 0x6, 0x7, 0xe6f2}) 09:40:42 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x201) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000000)=[0x3, 0x0, 0x2], 0x3, 0x80000000, 0xfff, 0x38c, 0x100, 0xfff, 0xc525, {0x3, 0x7, 0x9, 0x5, 0x1, 0x92b, 0x4, 0x2399, 0x20, 0x6, 0x2, 0x5, 0x4, 0x6e, "9580d38c67347e9c0d5359ac946b20173b0949639b0afd2c372eda04eeb6a046"}}) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000200)=[0xfff, 0x4, 0xaa1d, 0x4, 0x4, 0x0, 0xea3, 0x67be, 0x4], 0x9, 0x1ff, 0xb745, 0x0, 0xaac00000, 0x44a, 0x101, {0x2, 0xfff, 0x1000, 0x7, 0x0, 0xab5e, 0x9, 0x1, 0x8001, 0x0, 0xfffd, 0x1, 0x8, 0x4, "8cd381329f93d9c1bfc8c2a34d45a75b666beb155b36ea8554d52d15ad997ac3"}}) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x201) (async) syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r2, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000000)=[0x3, 0x0, 0x2], 0x3, 0x80000000, 0xfff, 0x38c, 0x100, 0xfff, 0xc525, {0x3, 0x7, 0x9, 0x5, 0x1, 0x92b, 0x4, 0x2399, 0x20, 0x6, 0x2, 0x5, 0x4, 0x6e, "9580d38c67347e9c0d5359ac946b20173b0949639b0afd2c372eda04eeb6a046"}}) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000200)=[0xfff, 0x4, 0xaa1d, 0x4, 0x4, 0x0, 0xea3, 0x67be, 0x4], 0x9, 0x1ff, 0xb745, 0x0, 0xaac00000, 0x44a, 0x101, {0x2, 0xfff, 0x1000, 0x7, 0x0, 0xab5e, 0x9, 0x1, 0x8001, 0x0, 0xfffd, 0x1, 0x8, 0x4, "8cd381329f93d9c1bfc8c2a34d45a75b666beb155b36ea8554d52d15ad997ac3"}}) (async) 09:40:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000100)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012abd7000ffdbdf25030000006d0058120000000008001700", @ANYRES32=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 09:40:42 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="9500000000001300"], &(0x7f0000000040)='GPL\x00', 0x1e5, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x8, 0x5, 0xd}, 0x10, 0x3442, 0xffffffffffffffff, 0x0, &(0x7f0000000180)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 09:40:42 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) r0 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) r1 = accept4$netrom(r0, &(0x7f0000000440)={{0x3, @rose}, [@default, @netrom, @netrom, @bcast, @default, @netrom, @netrom, @bcast]}, &(0x7f0000000200)=0x48, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f00000004c0)=0xb, &(0x7f0000000240)=0x4) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000600)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) (rerun: 64) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r3) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r4}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$BLKFRASET(r2, 0x1264, 0x0) r5 = accept4$x25(r2, &(0x7f0000000080)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x80000) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000500)={@null, 0xd, 'pimreg1\x00'}) (async) ioctl$SIOCX25GSUBSCRIP(r5, 0x89e0, &(0x7f0000000100)={'xfrm0\x00', 0x800, 0x1}) (async) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000000)={0x25, 0x1, 0x6, 0x7, 0xe6f2}) 09:40:42 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x8000000010c9, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x5, 0x0, 0x4, 0x10001, 0x5d38, 0x8, 0x0, 0x8000], 0x8, 0x800, 0x0, 0xffffffffffffffff}) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000002c0)) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, 0xfffffffffffffffd) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0x8000000010c9, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x5, 0x0, 0x4, 0x10001, 0x5d38, 0x8, 0x0, 0x8000], 0x8, 0x800}) (async) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000002c0)) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, 0xfffffffffffffffd) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 09:40:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000100)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012abd7000ffdbdf25030000006d0058120000000008001700", @ANYRES32=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r1, 0x1264, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000100)) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012abd7000ffdbdf25030000006d0058120000000008001700", @ANYRES32=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) (async) 09:40:42 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) r0 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) r1 = accept4$netrom(r0, &(0x7f0000000440)={{0x3, @rose}, [@default, @netrom, @netrom, @bcast, @default, @netrom, @netrom, @bcast]}, &(0x7f0000000200)=0x48, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f00000004c0)=0xb, &(0x7f0000000240)=0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000600)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r3) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r4}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$BLKFRASET(r2, 0x1264, 0x0) r5 = accept4$x25(r2, &(0x7f0000000080)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x80000) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000500)={@null, 0xd, 'pimreg1\x00'}) ioctl$SIOCX25GSUBSCRIP(r5, 0x89e0, &(0x7f0000000100)={'xfrm0\x00', 0x800, 0x1}) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000000)={0x25, 0x1, 0x6, 0x7, 0xe6f2}) socketpair(0x23, 0x0, 0x100000, 0x0) (async) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) (async) accept4$netrom(r0, &(0x7f0000000440)={{0x3, @rose}, [@default, @netrom, @netrom, @bcast, @default, @netrom, @netrom, @bcast]}, &(0x7f0000000200)=0x48, 0x0) (async) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f00000004c0)=0xb, &(0x7f0000000240)=0x4) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000600)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r3) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r4}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) ioctl$BLKFRASET(r2, 0x1264, 0x0) (async) accept4$x25(r2, &(0x7f0000000080)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x80000) (async) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000500)={@null, 0xd, 'pimreg1\x00'}) (async) ioctl$SIOCX25GSUBSCRIP(r5, 0x89e0, &(0x7f0000000100)={'xfrm0\x00', 0x800, 0x1}) (async) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000000)={0x25, 0x1, 0x6, 0x7, 0xe6f2}) (async) 09:40:42 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, '\x00', 0xa, 0x9}) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f00000000c0)={0x7fffffff, 0x7, 0x7}) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:42 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async, rerun: 64) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async, rerun: 64) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="9500000000001300"], &(0x7f0000000040)='GPL\x00', 0x1e5, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x8, 0x5, 0xd}, 0x10, 0x3442, 0xffffffffffffffff, 0x0, &(0x7f0000000180)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 09:40:42 executing program 0: socketpair(0x1d, 0xa, 0xabb3, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000000)=""/111) 09:40:42 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) 09:40:42 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ata_bmdma_status\x00'}, 0x10) 09:40:42 executing program 0: socketpair(0x1d, 0xa, 0xabb3, 0x0) (async) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000000)=""/111) 09:40:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000100)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012abd7000ffdbdf25030000006d0058120000000008001700", @ANYRES32=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r1, 0x1264, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000100)) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012abd7000ffdbdf25030000006d0058120000000008001700", @ANYRES32=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) (async) 09:40:42 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, '\x00', 0xa, 0x9}) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f00000000c0)={0x7fffffff, 0x7, 0x7}) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:42 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x8000000010c9, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x5, 0x0, 0x4, 0x10001, 0x5d38, 0x8, 0x0, 0x8000], 0x8, 0x800, 0x0, 0xffffffffffffffff}) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000002c0)) (async, rerun: 64) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (rerun: 64) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, 0xfffffffffffffffd) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async, rerun: 64) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:42 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) (async, rerun: 32) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) (rerun: 32) 09:40:42 executing program 0: socketpair(0x1d, 0xa, 0xabb3, 0x0) (async, rerun: 32) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000000)=""/111) (rerun: 32) 09:40:42 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ata_bmdma_status\x00'}, 0x10) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ata_bmdma_status\x00'}, 0x10) (async) 09:40:42 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, '\x00', 0xa, 0x9}) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f00000000c0)={0x7fffffff, 0x7, 0x7}) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:42 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) (async) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) (async) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) (async) 09:40:42 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x44601) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000100)={0x0, 0x6}) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) 09:40:42 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x12, 0x0, 0x0, "98e663b983fab437664971fc15fc12c1545782562203ab4a5b702cc2bc0d719ba0ad38a9ec6bf65132debf203e740fd104230bffe8a62d67beb471ad5039c39e", "2241cce2626639e3913596fffdbbbe648b8a0a7e8d79e4b20edf4b33fae90bec"}) ioctl$BLKFRASET(r0, 0x1264, 0x0) accept4$x25(r0, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0xc0800) timerfd_gettime(r0, &(0x7f0000000080)) 09:40:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80020000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:mount_tmp_t:s0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) 09:40:42 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x12, 0x0, 0x0, "98e663b983fab437664971fc15fc12c1545782562203ab4a5b702cc2bc0d719ba0ad38a9ec6bf65132debf203e740fd104230bffe8a62d67beb471ad5039c39e", "2241cce2626639e3913596fffdbbbe648b8a0a7e8d79e4b20edf4b33fae90bec"}) ioctl$BLKFRASET(r0, 0x1264, 0x0) accept4$x25(r0, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0xc0800) timerfd_gettime(r0, &(0x7f0000000080)) socketpair(0x23, 0x0, 0x100000, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x12, 0x0, 0x0, "98e663b983fab437664971fc15fc12c1545782562203ab4a5b702cc2bc0d719ba0ad38a9ec6bf65132debf203e740fd104230bffe8a62d67beb471ad5039c39e", "2241cce2626639e3913596fffdbbbe648b8a0a7e8d79e4b20edf4b33fae90bec"}) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) accept4$x25(r0, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0xc0800) (async) timerfd_gettime(r0, &(0x7f0000000080)) (async) 09:40:42 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x44601) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000100)={0x0, 0x6}) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x44601) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r2, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000100)={0x0, 0x6}) (async) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) (async) 09:40:42 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='\x00') ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80020000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:mount_tmp_t:s0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x201}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80020000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:mount_tmp_t:s0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) (async) 09:40:42 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ata_bmdma_status\x00'}, 0x10) 09:40:42 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x8000, 0x6}) 09:40:42 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) (async) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x44601) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000100)={0x0, 0x6}) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) 09:40:42 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x12, 0x0, 0x0, "98e663b983fab437664971fc15fc12c1545782562203ab4a5b702cc2bc0d719ba0ad38a9ec6bf65132debf203e740fd104230bffe8a62d67beb471ad5039c39e", "2241cce2626639e3913596fffdbbbe648b8a0a7e8d79e4b20edf4b33fae90bec"}) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) accept4$x25(r0, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0xc0800) (async) timerfd_gettime(r0, &(0x7f0000000080)) 09:40:42 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000000)=0x58) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x201}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80020000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:mount_tmp_t:s0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) 09:40:42 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async, rerun: 32) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (rerun: 32) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='\x00') (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:43 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) (async) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x8000, 0x6}) 09:40:43 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000080)=0xdfc, 0x4) 09:40:43 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) read$usbmon(r2, 0x0, 0x0) read$usbmon(r2, 0x0, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) syz_open_dev$loop(&(0x7f0000000000), 0xcfc0, 0x400) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:43 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000080)=0xdfc, 0x4) 09:40:43 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000000)=0x58) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:43 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='\x00') (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x88, r1, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) 09:40:43 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) (async) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000080)=0xdfc, 0x4) 09:40:43 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000000)=0x58) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:43 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f00000003c0)={@null, 0x1, 'wlan1\x00'}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0xa}) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000000)={0x3, 0xff}) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) 09:40:43 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) (async) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x8000, 0x6}) 09:40:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x88, r1, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x88, r1, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) (async) 09:40:43 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000000)) 09:40:43 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @remote}, &(0x7f0000000040)=0xc) socketpair(0x23, 0x0, 0x100000, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)={0x3f}) 09:40:43 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) read$usbmon(r2, 0x0, 0x0) read$usbmon(r2, 0x0, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) syz_open_dev$loop(&(0x7f0000000000), 0xcfc0, 0x400) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) (async) read$usbmon(r2, 0x0, 0x0) (async) read$usbmon(r2, 0x0, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) syz_open_dev$loop(&(0x7f0000000000), 0xcfc0, 0x400) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 09:40:43 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f00000003c0)={@null, 0x1, 'wlan1\x00'}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0xa}) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000000)={0x3, 0xff}) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) (async) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f00000003c0)={@null, 0x1, 'wlan1\x00'}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0xa}) (async) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000000)={0x3, 0xff}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) (async) 09:40:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x88, r1, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) 09:40:43 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @remote}, &(0x7f0000000040)=0xc) socketpair(0x23, 0x0, 0x100000, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)={0x3f}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @remote}, &(0x7f0000000040)=0xc) (async) socketpair(0x23, 0x0, 0x100000, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)={0x3f}) (async) 09:40:43 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x18, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5798e5335f76936a275d6c961e85a262"}) 09:40:43 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000000)) 09:40:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) 09:40:44 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) (async) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000000)) 09:40:44 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @remote}, &(0x7f0000000040)=0xc) socketpair(0x23, 0x0, 0x100000, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)={0x3f}) 09:40:44 executing program 0: accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@rose, @remote, @rose, @rose, @bcast, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x8bf3c74d5f9e033) socketpair(0x2, 0x5, 0x100002, 0x0) socketpair(0x15, 0x3, 0x7ff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f00000001c0), 0x4) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="00ee0000e04ff1011305ccf6f8ece18b2a5a61a522eee90286bd818020dc986cd41983306fe6225397898a95071dc928e02ca0f40100000000000000e35e3080e1fbed5b84b0ab1eaeffb09e60c73e1b405f56ac0c70e0b004b8b55cdec50868a920714d4fa92816cb6d096f19216dd89103549c0bd7218d33ac0223b90057de38e4c1c219df8e9f89b514d69cada6f0d443d96b3771ff2103000000cbfbf66709ded76e39d23590ffb8ef99b59c00"/186, @ANYRES16=r2, @ANYBLOB="04002abd7000fddbdf25010000000c00100009000000000000000c0016000000000000000a0006000e000101000006001c00f12300000500130020000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_sctp(0xa, 0x5, 0x84) 09:40:44 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x18, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5798e5335f76936a275d6c961e85a262"}) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x18, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5798e5335f76936a275d6c961e85a262"}) (async) 09:40:44 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f00000003c0)={@null, 0x1, 'wlan1\x00'}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0xa}) (async) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000000)={0x3, 0xff}) (async) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) 09:40:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) read$usbmon(r2, 0x0, 0x0) read$usbmon(r2, 0x0, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) syz_open_dev$loop(&(0x7f0000000000), 0xcfc0, 0x400) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) 09:40:44 executing program 0: accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@rose, @remote, @rose, @rose, @bcast, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x8bf3c74d5f9e033) socketpair(0x2, 0x5, 0x100002, 0x0) socketpair(0x15, 0x3, 0x7ff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f00000001c0), 0x4) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="00ee0000e04ff1011305ccf6f8ece18b2a5a61a522eee90286bd818020dc986cd41983306fe6225397898a95071dc928e02ca0f40100000000000000e35e3080e1fbed5b84b0ab1eaeffb09e60c73e1b405f56ac0c70e0b004b8b55cdec50868a920714d4fa92816cb6d096f19216dd89103549c0bd7218d33ac0223b90057de38e4c1c219df8e9f89b514d69cada6f0d443d96b3771ff2103000000cbfbf66709ded76e39d23590ffb8ef99b59c00"/186, @ANYRES16=r2, @ANYBLOB="04002abd7000fddbdf25010000000c00100009000000000000000c0016000000000000000a0006000e000101000006001c00f12300000500130020000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_sctp(0xa, 0x5, 0x84) accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@rose, @remote, @rose, @rose, @bcast, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x8bf3c74d5f9e033) (async) socketpair(0x2, 0x5, 0x100002, 0x0) (async) socketpair(0x15, 0x3, 0x7ff, &(0x7f00000000c0)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f00000001c0), 0x4) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="00ee0000e04ff1011305ccf6f8ece18b2a5a61a522eee90286bd818020dc986cd41983306fe6225397898a95071dc928e02ca0f40100000000000000e35e3080e1fbed5b84b0ab1eaeffb09e60c73e1b405f56ac0c70e0b004b8b55cdec50868a920714d4fa92816cb6d096f19216dd89103549c0bd7218d33ac0223b90057de38e4c1c219df8e9f89b514d69cada6f0d443d96b3771ff2103000000cbfbf66709ded76e39d23590ffb8ef99b59c00"/186, @ANYRES16=r2, @ANYBLOB="04002abd7000fddbdf25010000000c00100009000000000000000c0016000000000000000a0006000e000101000006001c00f12300000500130020000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) 09:40:44 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000040)) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x8) 09:40:44 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8, 0x0}) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000140)) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000000)={r1, 0xa0}) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) 09:40:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) 09:40:44 executing program 0: accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@rose, @remote, @rose, @rose, @bcast, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x8bf3c74d5f9e033) socketpair(0x2, 0x5, 0x100002, 0x0) socketpair(0x15, 0x3, 0x7ff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f00000001c0), 0x4) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="00ee0000e04ff1011305ccf6f8ece18b2a5a61a522eee90286bd818020dc986cd41983306fe6225397898a95071dc928e02ca0f40100000000000000e35e3080e1fbed5b84b0ab1eaeffb09e60c73e1b405f56ac0c70e0b004b8b55cdec50868a920714d4fa92816cb6d096f19216dd89103549c0bd7218d33ac0223b90057de38e4c1c219df8e9f89b514d69cada6f0d443d96b3771ff2103000000cbfbf66709ded76e39d23590ffb8ef99b59c00"/186, @ANYRES16=r2, @ANYBLOB="04002abd7000fddbdf25010000000c00100009000000000000000c0016000000000000000a0006000e000101000006001c00f12300000500130020000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) (async) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_sctp(0xa, 0x5, 0x84) 09:40:44 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x18, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5798e5335f76936a275d6c961e85a262"}) 09:40:44 executing program 3: sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:44 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000040)) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x8) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000040)) (async) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x8) (async) 09:40:44 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8, 0x0}) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000140)) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000000)={r1, 0xa0}) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000000)={r1, 0xa0}) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) (async) 09:40:44 executing program 3: sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) 09:40:45 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80, 0x10600) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:45 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) bind$x25(r0, &(0x7f0000000200), 0x12) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="0a0c26bd70007bdbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008a60fe27e000b00200000015efb6506c3e4381097c4ea5748ecca00060016000400000005001200010000000e0001006ebf5a67a43a7bd3fc56c82c394002006ebc657464657673696d300000080003006fe748009a5c25cf070100000500120026d71986f7000000000800010070636900110002003030303003000200000008000b0004000000"], 0xd0}, 0x1, 0x0, 0x0, 0x4008005}, 0x8000) 09:40:45 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000000)=[0x8000], 0x1, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000240)) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f00000001c0)=""/103) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) 09:40:45 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000040)) (async) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x8) 09:40:45 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8, 0x0}) (async) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000140)) (async, rerun: 64) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000000)={r1, 0xa0}) (async, rerun: 64) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) 09:40:45 executing program 3: sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:45 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) bind$x25(r0, &(0x7f0000000200), 0x12) (async, rerun: 64) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="0a0c26bd70007bdbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008a60fe27e000b00200000015efb6506c3e4381097c4ea5748ecca00060016000400000005001200010000000e0001006ebf5a67a43a7bd3fc56c82c394002006ebc657464657673696d300000080003006fe748009a5c25cf070100000500120026d71986f7000000000800010070636900110002003030303003000200000008000b0004000000"], 0xd0}, 0x1, 0x0, 0x0, 0x4008005}, 0x8000) 09:40:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x84, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:user_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:45 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80, 0x10600) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:45 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000000)=[0x8000], 0x1, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000240)) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f00000001c0)=""/103) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000000)=[0x8000], 0x1, 0x800}) (async) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000240)) (async) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f00000001c0)=""/103) (async) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) (async) 09:40:45 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000000)={0x6, 0x5e, 0xffffffff, 0x9, 0x0, 0x3}) 09:40:45 executing program 2: r0 = semget$private(0x0, 0x4, 0x1c) semctl$SEM_STAT(r0, 0x4, 0x12, &(0x7f0000000140)=""/193) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x2, 0x821c0) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000340)={0xe9a, 0x5, 0x0, [{0x5, 0x6, 0x5, 0x1, 0x0, 0x4, 0x20, '\x00', 0x8}, {0x4, 0x4b, 0x0, 0xb, 0x1, 0x0, 0x9, '\x00', 0x7}, {0xfffffffffffffffd, 0xfffffffffffffff9, 0x3, 0x2, 0x3, 0x3f, 0xc0, '\x00', 0x81}, {0xfffffffffffffff9, 0x5, 0xe5f, 0x20, 0x2, 0x81, 0x1, '\x00', 0x5}, {0xfffffffffffffc08, 0x117, 0x7fff, 0x3, 0x6, 0xff, 0xae, '\x00', 0x3ff}]}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r4, 0x1264, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, '\x00', 0x3, 0x6}) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:45 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80, 0x10600) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async, rerun: 32) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 32) 09:40:45 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) bind$x25(r0, &(0x7f0000000200), 0x12) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="0a0c26bd70007bdbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008a60fe27e000b00200000015efb6506c3e4381097c4ea5748ecca00060016000400000005001200010000000e0001006ebf5a67a43a7bd3fc56c82c394002006ebc657464657673696d300000080003006fe748009a5c25cf070100000500120026d71986f7000000000800010070636900110002003030303003000200000008000b0004000000"], 0xd0}, 0x1, 0x0, 0x0, 0x4008005}, 0x8000) 09:40:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x84, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:user_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:45 executing program 2: r0 = semget$private(0x0, 0x4, 0x1c) semctl$SEM_STAT(r0, 0x4, 0x12, &(0x7f0000000140)=""/193) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x2, 0x821c0) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000340)={0xe9a, 0x5, 0x0, [{0x5, 0x6, 0x5, 0x1, 0x0, 0x4, 0x20, '\x00', 0x8}, {0x4, 0x4b, 0x0, 0xb, 0x1, 0x0, 0x9, '\x00', 0x7}, {0xfffffffffffffffd, 0xfffffffffffffff9, 0x3, 0x2, 0x3, 0x3f, 0xc0, '\x00', 0x81}, {0xfffffffffffffff9, 0x5, 0xe5f, 0x20, 0x2, 0x81, 0x1, '\x00', 0x5}, {0xfffffffffffffc08, 0x117, 0x7fff, 0x3, 0x6, 0xff, 0xae, '\x00', 0x3ff}]}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r4, 0x1264, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, '\x00', 0x3, 0x6}) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) semget$private(0x0, 0x4, 0x1c) (async) semctl$SEM_STAT(r0, 0x4, 0x12, &(0x7f0000000140)=""/193) (async) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) syz_open_dev$loop(&(0x7f00000000c0), 0x2, 0x821c0) (async) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000340)={0xe9a, 0x5, 0x0, [{0x5, 0x6, 0x5, 0x1, 0x0, 0x4, 0x20, '\x00', 0x8}, {0x4, 0x4b, 0x0, 0xb, 0x1, 0x0, 0x9, '\x00', 0x7}, {0xfffffffffffffffd, 0xfffffffffffffff9, 0x3, 0x2, 0x3, 0x3f, 0xc0, '\x00', 0x81}, {0xfffffffffffffff9, 0x5, 0xe5f, 0x20, 0x2, 0x81, 0x1, '\x00', 0x5}, {0xfffffffffffffc08, 0x117, 0x7fff, 0x3, 0x6, 0xff, 0xae, '\x00', 0x3ff}]}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r4, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, '\x00', 0x3, 0x6}) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) 09:40:45 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (rerun: 32) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000000)={0x6, 0x5e, 0xffffffff, 0x9, 0x0, 0x3}) 09:40:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x84, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:user_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:45 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x44, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0x5, 'nr0\x00'}) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:45 executing program 0: socketpair(0x23, 0x80000, 0xffffc, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x81, 0x40, 0xffff, 0x20, r0, 0x38, '\x00', 0x0, r0, 0x3, 0x0, 0x4, 0x10009}, 0x48) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 09:40:45 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000000)=[0x8000], 0x1, 0x800, 0x0, 0xffffffffffffffff}) (rerun: 64) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000240)) (async) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f00000001c0)=""/103) (async, rerun: 64) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) (rerun: 64) 09:40:45 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000180)={0x7f, "20481b6d513d98ac8a2e7c48cfc01de6f07fe9206df4dc34a06b44432f97a9ada66f9602d1580e54daa905d0a6b5560ca94546f00b9ccc2d76627447198aaa8c7a7b3604aa6783549907f471fc696600a36e67ff31b704a72eefc82897d6e6f5c856d0bd54e6240e5157fa2d6dfa2251b4d079415e7b4999d1bb18cb3b2beed4"}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000000)={0x200, 0x5}) 09:40:45 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x44, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0x5, 'nr0\x00'}) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:45 executing program 0: socketpair(0x23, 0x80000, 0xffffc, 0x0) (async, rerun: 64) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x81, 0x40, 0xffff, 0x20, r0, 0x38, '\x00', 0x0, r0, 0x3, 0x0, 0x4, 0x10009}, 0x48) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (rerun: 32) 09:40:45 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000040)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20008042) 09:40:45 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000000)={0x6, 0x5e, 0xffffffff, 0x9, 0x0, 0x3}) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000000)={0x6, 0x5e, 0xffffffff, 0x9, 0x0, 0x3}) (async) 09:40:45 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async, rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000040)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20008042) (rerun: 32) 09:40:45 executing program 2: r0 = semget$private(0x0, 0x4, 0x1c) semctl$SEM_STAT(r0, 0x4, 0x12, &(0x7f0000000140)=""/193) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x2, 0x821c0) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000340)={0xe9a, 0x5, 0x0, [{0x5, 0x6, 0x5, 0x1, 0x0, 0x4, 0x20, '\x00', 0x8}, {0x4, 0x4b, 0x0, 0xb, 0x1, 0x0, 0x9, '\x00', 0x7}, {0xfffffffffffffffd, 0xfffffffffffffff9, 0x3, 0x2, 0x3, 0x3f, 0xc0, '\x00', 0x81}, {0xfffffffffffffff9, 0x5, 0xe5f, 0x20, 0x2, 0x81, 0x1, '\x00', 0x5}, {0xfffffffffffffc08, 0x117, 0x7fff, 0x3, 0x6, 0xff, 0xae, '\x00', 0x3ff}]}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r4, 0x1264, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, '\x00', 0x3, 0x6}) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) semget$private(0x0, 0x4, 0x1c) (async) semctl$SEM_STAT(r0, 0x4, 0x12, &(0x7f0000000140)=""/193) (async) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) syz_open_dev$loop(&(0x7f00000000c0), 0x2, 0x821c0) (async) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000340)={0xe9a, 0x5, 0x0, [{0x5, 0x6, 0x5, 0x1, 0x0, 0x4, 0x20, '\x00', 0x8}, {0x4, 0x4b, 0x0, 0xb, 0x1, 0x0, 0x9, '\x00', 0x7}, {0xfffffffffffffffd, 0xfffffffffffffff9, 0x3, 0x2, 0x3, 0x3f, 0xc0, '\x00', 0x81}, {0xfffffffffffffff9, 0x5, 0xe5f, 0x20, 0x2, 0x81, 0x1, '\x00', 0x5}, {0xfffffffffffffc08, 0x117, 0x7fff, 0x3, 0x6, 0xff, 0xae, '\x00', 0x3ff}]}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r4, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, '\x00', 0x3, 0x6}) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) 09:40:45 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x44, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0x5, 'nr0\x00'}) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:45 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000040)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20008042) 09:40:45 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0xe716, 0x216800) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:45 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000180)={0x7f, "20481b6d513d98ac8a2e7c48cfc01de6f07fe9206df4dc34a06b44432f97a9ada66f9602d1580e54daa905d0a6b5560ca94546f00b9ccc2d76627447198aaa8c7a7b3604aa6783549907f471fc696600a36e67ff31b704a72eefc82897d6e6f5c856d0bd54e6240e5157fa2d6dfa2251b4d079415e7b4999d1bb18cb3b2beed4"}) (async, rerun: 64) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) (async) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000000)={0x200, 0x5}) 09:40:45 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r2 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000040)=0x3, 0x4) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:45 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000180)={0x7f, "20481b6d513d98ac8a2e7c48cfc01de6f07fe9206df4dc34a06b44432f97a9ada66f9602d1580e54daa905d0a6b5560ca94546f00b9ccc2d76627447198aaa8c7a7b3604aa6783549907f471fc696600a36e67ff31b704a72eefc82897d6e6f5c856d0bd54e6240e5157fa2d6dfa2251b4d079415e7b4999d1bb18cb3b2beed4"}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000000)={0x200, 0x5}) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000180)={0x7f, "20481b6d513d98ac8a2e7c48cfc01de6f07fe9206df4dc34a06b44432f97a9ada66f9602d1580e54daa905d0a6b5560ca94546f00b9ccc2d76627447198aaa8c7a7b3604aa6783549907f471fc696600a36e67ff31b704a72eefc82897d6e6f5c856d0bd54e6240e5157fa2d6dfa2251b4d079415e7b4999d1bb18cb3b2beed4"}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) (async) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000000)={0x200, 0x5}) (async) 09:40:45 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0xe716, 0x216800) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) syz_open_dev$loop(&(0x7f0000000080), 0xe716, 0x216800) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) 09:40:46 executing program 0: socketpair(0x23, 0x80000, 0xffffc, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x81, 0x40, 0xffff, 0x20, r0, 0x38, '\x00', 0x0, r0, 0x3, 0x0, 0x4, 0x10009}, 0x48) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 09:40:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) ioctl$BLKFRASET(r2, 0x1264, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0xf, 'veth0_to_hsr\x00'}) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:46 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) r1 = syz_open_dev$loop(&(0x7f0000000080), 0xe716, 0x216800) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:cron_log_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:ldconfig_cache_t:s0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040042}, 0x40000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x4001) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004010}, 0x0) 09:40:46 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0xfffffffffffffffe, 0x400000) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) 09:40:46 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) r2 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000040)=0x3, 0x4) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:46 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0xfffffffffffffffe, 0x400000) (async) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) 09:40:46 executing program 0: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000080)={&(0x7f0000000040)=[0x6, 0x400], 0x2, 0x70, 0xcd9, 0x10001, 0x10001, 0x1, 0xff, {0x1, 0x2, 0x401, 0x6, 0x86, 0x1ff, 0x2, 0xe9, 0x1, 0xbf85, 0xffff, 0x829, 0x5, 0x1000, "4a766ebd69a1cd0eb148627476aac82b0c692fea1217a3b78e0f6beca3f15b29"}}) socketpair(0x26, 0x2, 0x100020, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x401, 0x5, 0x1, 0x5, 0x40], 0x5, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x4, 0x101], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000180)={0x6, 0x7, 0x100, 0x0, 0x101, 0x57}) 09:40:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:cron_log_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:ldconfig_cache_t:s0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040042}, 0x40000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x4001) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004010}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:cron_log_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:ldconfig_cache_t:s0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040042}, 0x40000) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x4001) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004010}, 0x0) (async) 09:40:46 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) syz_open_dev$MSR(&(0x7f0000000000), 0x401, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000000c0)=0x10001, &(0x7f0000000140)=0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) ioctl$BLKFRASET(r2, 0x1264, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0xf, 'veth0_to_hsr\x00'}) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:46 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r2 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000040)=0x3, 0x4) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000040)=0x3, 0x4) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) 09:40:46 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0xfffffffffffffffe, 0x400000) (async) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) 09:40:46 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) syz_open_dev$MSR(&(0x7f0000000000), 0x401, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000000c0)=0x10001, &(0x7f0000000140)=0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async, rerun: 64) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (rerun: 64) 09:40:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) (async, rerun: 64) ioctl$BLKFRASET(r2, 0x1264, 0x0) (async, rerun: 64) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0xf, 'veth0_to_hsr\x00'}) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:46 executing program 0: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000080)={&(0x7f0000000040)=[0x6, 0x400], 0x2, 0x70, 0xcd9, 0x10001, 0x10001, 0x1, 0xff, {0x1, 0x2, 0x401, 0x6, 0x86, 0x1ff, 0x2, 0xe9, 0x1, 0xbf85, 0xffff, 0x829, 0x5, 0x1000, "4a766ebd69a1cd0eb148627476aac82b0c692fea1217a3b78e0f6beca3f15b29"}}) (async) socketpair(0x26, 0x2, 0x100020, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x401, 0x5, 0x1, 0x5, 0x40], 0x5, 0x800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x4, 0x101], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000180)={0x6, 0x7, 0x100, 0x0, 0x101, 0x57}) 09:40:46 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000180)={'veth0_macvtap\x00', 0xf05, 0x2}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000280)=0x4) 09:40:46 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) syz_open_dev$MSR(&(0x7f0000000000), 0x401, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000000c0)=0x10001, &(0x7f0000000140)=0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) syz_open_dev$MSR(&(0x7f0000000000), 0x401, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000000c0)=0x10001, &(0x7f0000000140)=0x4) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) 09:40:46 executing program 0: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000080)={&(0x7f0000000040)=[0x6, 0x400], 0x2, 0x70, 0xcd9, 0x10001, 0x10001, 0x1, 0xff, {0x1, 0x2, 0x401, 0x6, 0x86, 0x1ff, 0x2, 0xe9, 0x1, 0xbf85, 0xffff, 0x829, 0x5, 0x1000, "4a766ebd69a1cd0eb148627476aac82b0c692fea1217a3b78e0f6beca3f15b29"}}) socketpair(0x26, 0x2, 0x100020, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x401, 0x5, 0x1, 0x5, 0x40], 0x5, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x4, 0x101], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000180)={0x6, 0x7, 0x100, 0x0, 0x101, 0x57}) 09:40:46 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0xfffffffa, 0x1, 0x1f, 0x1c, "49c5f30960efe72758e958ed963c0fef50f760cf75192e05b1489feb758c7e5b09aab37ec791863f863d798b5e4e984bd57cb02929deac39c126eb7f3861088f", "bc7e9a44b90b3ad4a80ec786487acc7ce1a56d8dc0ce6aa651433ae1590a0110", [0x773294c6, 0x7]}) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) 09:40:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:cron_log_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:ldconfig_cache_t:s0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040042}, 0x40000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x4001) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004010}, 0x0) 09:40:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0xffffffffffff4b04, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x403, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x40, 0x46, 0x6e, 0x7f, {{0x28, 0x4, 0x1, 0x3, 0xa0, 0x65, 0x0, 0x8, 0x6, 0x0, @local, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x14, 0x98, 0x1, 0x5, [{@multicast1, 0xfff}, {@remote, 0xffffffff}]}, @timestamp={0x44, 0x20, 0x2a, 0x0, 0x8, [0x5, 0x7, 0x9, 0x1f, 0x610, 0x3, 0x0]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x17, 0x99, [@private=0xa010101, @multicast2, @loopback, @remote, @broadcast]}, @timestamp_prespec={0x44, 0x34, 0x4b, 0x3, 0x0, [{@broadcast, 0x3}, {@empty, 0x1}, {@multicast2, 0xff}, {@private=0xa010102, 0x80}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}, {@multicast1, 0x10001}]}, @timestamp={0x44, 0x8, 0xe7, 0x0, 0x9, [0x3ff]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r1, 0x4, 0x7, 0x8, 0x2, 0x74, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x80, 0x10, 0x1ff, 0x7}}) socketpair(0x23, 0x0, 0x100000, 0x0) 09:40:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x403, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x40, 0x46, 0x6e, 0x7f, {{0x28, 0x4, 0x1, 0x3, 0xa0, 0x65, 0x0, 0x8, 0x6, 0x0, @local, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x14, 0x98, 0x1, 0x5, [{@multicast1, 0xfff}, {@remote, 0xffffffff}]}, @timestamp={0x44, 0x20, 0x2a, 0x0, 0x8, [0x5, 0x7, 0x9, 0x1f, 0x610, 0x3, 0x0]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x17, 0x99, [@private=0xa010101, @multicast2, @loopback, @remote, @broadcast]}, @timestamp_prespec={0x44, 0x34, 0x4b, 0x3, 0x0, [{@broadcast, 0x3}, {@empty, 0x1}, {@multicast2, 0xff}, {@private=0xa010102, 0x80}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}, {@multicast1, 0x10001}]}, @timestamp={0x44, 0x8, 0xe7, 0x0, 0x9, [0x3ff]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r1, 0x4, 0x7, 0x8, 0x2, 0x74, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x80, 0x10, 0x1ff, 0x7}}) socketpair(0x23, 0x0, 0x100000, 0x0) 09:40:46 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000180)={'veth0_macvtap\x00', 0xf05, 0x2}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000280)=0x4) 09:40:46 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000180)) r2 = accept4$x25(r0, &(0x7f0000000280)={0x9, @remote}, &(0x7f00000004c0)=0x12, 0x800) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f00000003c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0xe, 'lo\x00'}) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000140)={0x6e, 0xffffffffffffffc1}) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) socketpair(0x18, 0x800, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCX25GCAUSEDIAG(r5, 0x89e6, &(0x7f00000000c0)={0x9, 0x8}) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r6, 0x1264, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f00000001c0)=0xfffffffffffffffd, 0x8) 09:40:46 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0}, 0x0) 09:40:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x403, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x40, 0x46, 0x6e, 0x7f, {{0x28, 0x4, 0x1, 0x3, 0xa0, 0x65, 0x0, 0x8, 0x6, 0x0, @local, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x14, 0x98, 0x1, 0x5, [{@multicast1, 0xfff}, {@remote, 0xffffffff}]}, @timestamp={0x44, 0x20, 0x2a, 0x0, 0x8, [0x5, 0x7, 0x9, 0x1f, 0x610, 0x3, 0x0]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x17, 0x99, [@private=0xa010101, @multicast2, @loopback, @remote, @broadcast]}, @timestamp_prespec={0x44, 0x34, 0x4b, 0x3, 0x0, [{@broadcast, 0x3}, {@empty, 0x1}, {@multicast2, 0xff}, {@private=0xa010102, 0x80}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}, {@multicast1, 0x10001}]}, @timestamp={0x44, 0x8, 0xe7, 0x0, 0x9, [0x3ff]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r1, 0x4, 0x7, 0x8, 0x2, 0x74, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x80, 0x10, 0x1ff, 0x7}}) socketpair(0x23, 0x0, 0x100000, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x403, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x40, 0x46, 0x6e, 0x7f, {{0x28, 0x4, 0x1, 0x3, 0xa0, 0x65, 0x0, 0x8, 0x6, 0x0, @local, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x14, 0x98, 0x1, 0x5, [{@multicast1, 0xfff}, {@remote, 0xffffffff}]}, @timestamp={0x44, 0x20, 0x2a, 0x0, 0x8, [0x5, 0x7, 0x9, 0x1f, 0x610, 0x3, 0x0]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x17, 0x99, [@private=0xa010101, @multicast2, @loopback, @remote, @broadcast]}, @timestamp_prespec={0x44, 0x34, 0x4b, 0x3, 0x0, [{@broadcast, 0x3}, {@empty, 0x1}, {@multicast2, 0xff}, {@private=0xa010102, 0x80}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}, {@multicast1, 0x10001}]}, @timestamp={0x44, 0x8, 0xe7, 0x0, 0x9, [0x3ff]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r1, 0x4, 0x7, 0x8, 0x2, 0x74, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x80, 0x10, 0x1ff, 0x7}}) (async) socketpair(0x23, 0x0, 0x100000, 0x0) (async) 09:40:46 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0xfffffffa, 0x1, 0x1f, 0x1c, "49c5f30960efe72758e958ed963c0fef50f760cf75192e05b1489feb758c7e5b09aab37ec791863f863d798b5e4e984bd57cb02929deac39c126eb7f3861088f", "bc7e9a44b90b3ad4a80ec786487acc7ce1a56d8dc0ce6aa651433ae1590a0110", [0x773294c6, 0x7]}) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) (async) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0xfffffffa, 0x1, 0x1f, 0x1c, "49c5f30960efe72758e958ed963c0fef50f760cf75192e05b1489feb758c7e5b09aab37ec791863f863d798b5e4e984bd57cb02929deac39c126eb7f3861088f", "bc7e9a44b90b3ad4a80ec786487acc7ce1a56d8dc0ce6aa651433ae1590a0110", [0x773294c6, 0x7]}) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) (async) 09:40:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000000), 0xffffffffffff4b04, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0xffffffffffff4b04, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async, rerun: 64) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 64) 09:40:46 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) socket$inet(0x2, 0xa, 0x4) 09:40:46 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0}, 0x0) 09:40:46 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000180)={'veth0_macvtap\x00', 0xf05, 0x2}) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000280)=0x4) 09:40:46 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) (async) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000180)) (async) r2 = accept4$x25(r0, &(0x7f0000000280)={0x9, @remote}, &(0x7f00000004c0)=0x12, 0x800) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f00000003c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0xe, 'lo\x00'}) (async) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000140)={0x6e, 0xffffffffffffffc1}) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) socketpair(0x18, 0x800, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCX25GCAUSEDIAG(r5, 0x89e6, &(0x7f00000000c0)={0x9, 0x8}) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) (async, rerun: 64) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) ioctl$BLKFRASET(r6, 0x1264, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f00000001c0)=0xfffffffffffffffd, 0x8) 09:40:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x55ac, 0x12, 0x11, 0x11, "bf31f3bd1092902d588afbdb232c8263eb9ba786b9ef23adcfd081400a211014994918b158dc736738603728a1a7e681958b07ef508636ec1802267b6b8fae43", "67c37ee118722b68b85d7e85382cb36e8252948484f285a00285e622fb6f0d43", [0x9bc, 0x9]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:46 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0}, 0x0) 09:40:46 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) socket$inet(0x2, 0xa, 0x4) 09:40:46 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async, rerun: 64) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (rerun: 64) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0xfffffffa, 0x1, 0x1f, 0x1c, "49c5f30960efe72758e958ed963c0fef50f760cf75192e05b1489feb758c7e5b09aab37ec791863f863d798b5e4e984bd57cb02929deac39c126eb7f3861088f", "bc7e9a44b90b3ad4a80ec786487acc7ce1a56d8dc0ce6aa651433ae1590a0110", [0x773294c6, 0x7]}) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) 09:40:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0}, 0x4) 09:40:47 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) socket$inet(0x2, 0xa, 0x4) socketpair(0x23, 0x0, 0x100000, 0x0) (async) socket$inet(0x2, 0xa, 0x4) (async) 09:40:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0}, 0x4) (async) 09:40:47 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0xfffffc01, "1335f6cd892dbc085fb15ff20f06f3e92d24b2c54982437c985be311a333bae6", 0xffffffffffffffff}) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0x2, 0x800]}) r3 = getpgrp(0xffffffffffffffff) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000180)=r3, 0x12) 09:40:47 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) (async) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000180)) (async) r2 = accept4$x25(r0, &(0x7f0000000280)={0x9, @remote}, &(0x7f00000004c0)=0x12, 0x800) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f00000003c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0xe, 'lo\x00'}) (async) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000140)={0x6e, 0xffffffffffffffc1}) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) socketpair(0x18, 0x800, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCX25GCAUSEDIAG(r5, 0x89e6, &(0x7f00000000c0)={0x9, 0x8}) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) (async) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r6, 0x1264, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f00000001c0)=0xfffffffffffffffd, 0x8) 09:40:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0}, 0x4) 09:40:47 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000000)={0x4}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x9, 0x3, 0x3], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000140)) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) 09:40:47 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x55ac, 0x12, 0x11, 0x11, "bf31f3bd1092902d588afbdb232c8263eb9ba786b9ef23adcfd081400a211014994918b158dc736738603728a1a7e681958b07ef508636ec1802267b6b8fae43", "67c37ee118722b68b85d7e85382cb36e8252948484f285a00285e622fb6f0d43", [0x9bc, 0x9]}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:47 executing program 0: socketpair(0x1f, 0x0, 0x100000, 0x0) 09:40:47 executing program 3: bind$x25(0xffffffffffffffff, &(0x7f0000000000), 0x12) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8f13cfad3fa6fbac372a9d25bb8b0ecd9495143b7af6f6319c48293c4d7f95a445bec9a903f74b1f95c4ddd587d862ab366fc2691025bb3daccb75af7199536cead29f35ba492378df4dc372a942d0b02259c0aed29e18123f7704ee4915c5e1bc382ddad0c2", @ANYRES16=r1, @ANYBLOB="000826bd7000fddbdf25060000001400060064766d7270310000000000000000000014000300fe8000000000000000000000000000aa08000500ac1414bb2300070073797374656d5f753a6f626a6563745f723a73755f657865635f743a73300000140003000000000000000000000000000000000108000500ac1414bb14000200fc010000000000000000000000000001"], 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x4040040) 09:40:47 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={r3}) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:47 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000000)={0x4}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x9, 0x3, 0x3], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000140)) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) (async) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000000)={0x4}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x9, 0x3, 0x3], 0x3, 0x80000}) (async) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000140)) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) (async) 09:40:47 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0xfffffc01, "1335f6cd892dbc085fb15ff20f06f3e92d24b2c54982437c985be311a333bae6", 0xffffffffffffffff}) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0x2, 0x800]}) r3 = getpgrp(0xffffffffffffffff) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000180)=r3, 0x12) 09:40:47 executing program 3: bind$x25(0xffffffffffffffff, &(0x7f0000000000), 0x12) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8f13cfad3fa6fbac372a9d25bb8b0ecd9495143b7af6f6319c48293c4d7f95a445bec9a903f74b1f95c4ddd587d862ab366fc2691025bb3daccb75af7199536cead29f35ba492378df4dc372a942d0b02259c0aed29e18123f7704ee4915c5e1bc382ddad0c2", @ANYRES16=r1, @ANYBLOB="000826bd7000fddbdf25060000001400060064766d7270310000000000000000000014000300fe8000000000000000000000000000aa08000500ac1414bb2300070073797374656d5f753a6f626a6563745f723a73755f657865635f743a73300000140003000000000000000000000000000000000108000500ac1414bb14000200fc010000000000000000000000000001"], 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x4040040) 09:40:47 executing program 0: socketpair(0x1f, 0x0, 0x100000, 0x0) 09:40:47 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x55ac, 0x12, 0x11, 0x11, "bf31f3bd1092902d588afbdb232c8263eb9ba786b9ef23adcfd081400a211014994918b158dc736738603728a1a7e681958b07ef508636ec1802267b6b8fae43", "67c37ee118722b68b85d7e85382cb36e8252948484f285a00285e622fb6f0d43", [0x9bc, 0x9]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:47 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={r3}) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={r3}) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) 09:40:47 executing program 0: socketpair(0x1f, 0x0, 0x100000, 0x0) socketpair(0x1f, 0x0, 0x100000, 0x0) (async) 09:40:47 executing program 3: bind$x25(0xffffffffffffffff, &(0x7f0000000000), 0x12) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8f13cfad3fa6fbac372a9d25bb8b0ecd9495143b7af6f6319c48293c4d7f95a445bec9a903f74b1f95c4ddd587d862ab366fc2691025bb3daccb75af7199536cead29f35ba492378df4dc372a942d0b02259c0aed29e18123f7704ee4915c5e1bc382ddad0c2", @ANYRES16=r1, @ANYBLOB="000826bd7000fddbdf25060000001400060064766d7270310000000000000000000014000300fe8000000000000000000000000000aa08000500ac1414bb2300070073797374656d5f753a6f626a6563745f723a73755f657865635f743a73300000140003000000000000000000000000000000000108000500ac1414bb14000200fc010000000000000000000000000001"], 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x4040040) bind$x25(0xffffffffffffffff, &(0x7f0000000000), 0x12) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8f13cfad3fa6fbac372a9d25bb8b0ecd9495143b7af6f6319c48293c4d7f95a445bec9a903f74b1f95c4ddd587d862ab366fc2691025bb3daccb75af7199536cead29f35ba492378df4dc372a942d0b02259c0aed29e18123f7704ee4915c5e1bc382ddad0c2", @ANYRES16=r1, @ANYBLOB="000826bd7000fddbdf25060000001400060064766d7270310000000000000000000014000300fe8000000000000000000000000000aa08000500ac1414bb2300070073797374656d5f753a6f626a6563745f723a73755f657865635f743a73300000140003000000000000000000000000000000000108000500ac1414bb14000200fc010000000000000000000000000001"], 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x4040040) (async) 09:40:47 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x40, 0x3848, 0x80, 0x7], 0x4, 0x0, 0x0, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xfff, 0x400, 0x40000, 0x208, 0x1, 0xf08, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0xd}, 0x48) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x20000000000001a1, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x109d}, @cb_func={0x18, 0xc, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0xdd, &(0x7f0000000080)=""/221, 0x41100, 0x16, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000200)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xf, 0x3, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, r1, r2, 0x1, 0xffffffffffffffff]}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r4, 0x1264, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x73d, 0x4, 0x4, 0x1b35, 0x1, 0x97, '\x00', 0x0, r4, 0x2, 0x0, 0x5, 0x5}, 0x48) 09:40:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0}, 0x44005) 09:40:47 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) (async) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000000)={0x4}) (async) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x9, 0x3, 0x3], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) (rerun: 32) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000140)) (async) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) 09:40:47 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0xfffffc01, "1335f6cd892dbc085fb15ff20f06f3e92d24b2c54982437c985be311a333bae6", 0xffffffffffffffff}) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262", [0x2, 0x800]}) (async) r3 = getpgrp(0xffffffffffffffff) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000180)=r3, 0x12) 09:40:47 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x40, 0x3848, 0x80, 0x7], 0x4, 0x0, 0x0, 0xffffffffffffffff}) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xfff, 0x400, 0x40000, 0x208, 0x1, 0xf08, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0xd}, 0x48) (async, rerun: 32) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x20000000000001a1, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x109d}, @cb_func={0x18, 0xc, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0xdd, &(0x7f0000000080)=""/221, 0x41100, 0x16, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000200)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xf, 0x3, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, r1, r2, 0x1, 0xffffffffffffffff]}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) (async) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r4, 0x1264, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x73d, 0x4, 0x4, 0x1b35, 0x1, 0x97, '\x00', 0x0, r4, 0x2, 0x0, 0x5, 0x5}, 0x48) (rerun: 64) 09:40:47 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async, rerun: 32) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000)={0x0, 0x0}) (rerun: 32) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={r3}) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:47 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x101, 0x4401) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:47 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) 09:40:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x201}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0}, 0x44005) 09:40:47 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x40, 0x3848, 0x80, 0x7], 0x4, 0x0, 0x0, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xfff, 0x400, 0x40000, 0x208, 0x1, 0xf08, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0xd}, 0x48) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x20000000000001a1, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x109d}, @cb_func={0x18, 0xc, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0xdd, &(0x7f0000000080)=""/221, 0x41100, 0x16, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000200)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xf, 0x3, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, r1, r2, 0x1, 0xffffffffffffffff]}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r4, 0x1264, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x73d, 0x4, 0x4, 0x1b35, 0x1, 0x97, '\x00', 0x0, r4, 0x2, 0x0, 0x5, 0x5}, 0x48) socketpair(0x23, 0x0, 0x100000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x40, 0x3848, 0x80, 0x7], 0x4}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xfff, 0x400, 0x40000, 0x208, 0x1, 0xf08, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0xd}, 0x48) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r2, 0x1264, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x20000000000001a1, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x109d}, @cb_func={0x18, 0xc, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0xdd, &(0x7f0000000080)=""/221, 0x41100, 0x16, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000200)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xf, 0x3, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, r1, r2, 0x1, 0xffffffffffffffff]}, 0x80) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r3, 0x1264, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r4, 0x1264, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x73d, 0x4, 0x4, 0x1b35, 0x1, 0x97, '\x00', 0x0, r4, 0x2, 0x0, 0x5, 0x5}, 0x48) (async) 09:40:47 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000004c0)={&(0x7f0000000480)=[0xf, 0x81], 0x2, 0x4, 0x400, 0xffffffff, 0x7fffffff, 0x3f, 0x5, {0x40, 0x8001, 0xe4, 0x20, 0x7, 0x8000, 0xe, 0x0, 0x7fff, 0x6, 0xfffc, 0x3, 0x80000001, 0x1, "a645d7555cd10a6f281c5f5d617b674bb838879c72079148c8aa1f0e778b8e2c"}}) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000040000000000000003000000186b00000b0000000000000003000000183b0000040000000000000000000000850000000c0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xd7, &(0x7f0000000200)=""/215, 0x40f00, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x4, 0xffff, 0x400}, 0x10, 0x28a0e, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[0xffffffffffffffff]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r2}, 0x10) 09:40:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0}, 0x44005) 09:40:47 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) 09:40:47 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) ioctl$BLKRAGET(r2, 0x1263, &(0x7f00000000c0)) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x402101, 0x0) ioctl$BLKFRASET(r4, 0x1264, 0x0) setsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, &(0x7f0000000000)=0x9, 0x4) syz_open_dev$usbmon(&(0x7f0000000140), 0x538, 0x8800) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) 09:40:47 executing program 3: ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000000)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0xfffffffffffffd61, 0x0, 0x1, 0x0, 0x0, 0x4d095}, 0x800) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000}) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48854}, 0xc000) 09:40:47 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x101, 0x4401) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async, rerun: 32) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 32) 09:40:47 executing program 0: socketpair(0x23, 0x0, 0x8100000, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @local, @remote}, &(0x7f0000000200)=0xc) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x1, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x1, 0x6, 0x2, 0x6, 0xc, 0xfffffffffffffffc}], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0xb, '\x00', r0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x2, 0x6, 0x5}, 0x10, 0x0, r1, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, r2, 0xffffffffffffffff, r3]}, 0x80) socketpair(0x21, 0x800, 0x5, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f00000003c0)={@multicast2, 0x0, 0x0, 0x40, 0x0, [{@multicast1}, {@multicast2}, {@multicast1}, {@empty}]}}) connect$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @null, 0x2}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) 09:40:47 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) 09:40:47 executing program 3: ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000000)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0xfffffffffffffd61, 0x0, 0x1, 0x0, 0x0, 0x4d095}, 0x800) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000}) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48854}, 0xc000) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000000)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0xfffffffffffffd61, 0x0, 0x1, 0x0, 0x0, 0x4d095}, 0x800) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000}) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48854}, 0xc000) (async) 09:40:47 executing program 0: socketpair(0x23, 0x0, 0x8100000, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @local, @remote}, &(0x7f0000000200)=0xc) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x1, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x1, 0x6, 0x2, 0x6, 0xc, 0xfffffffffffffffc}], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0xb, '\x00', r0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x2, 0x6, 0x5}, 0x10, 0x0, r1, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, r2, 0xffffffffffffffff, r3]}, 0x80) socketpair(0x21, 0x800, 0x5, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f00000003c0)={@multicast2, 0x0, 0x0, 0x40, 0x0, [{@multicast1}, {@multicast2}, {@multicast1}, {@empty}]}}) connect$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @null, 0x2}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) socketpair(0x23, 0x0, 0x8100000, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @local, @remote}, &(0x7f0000000200)=0xc) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r1, 0x1264, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r2, 0x1264, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x1, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x1, 0x6, 0x2, 0x6, 0xc, 0xfffffffffffffffc}], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0xb, '\x00', r0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x2, 0x6, 0x5}, 0x10, 0x0, r1, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, r2, 0xffffffffffffffff, r3]}, 0x80) (async) socketpair(0x21, 0x800, 0x5, &(0x7f0000000000)) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f00000003c0)={@multicast2, 0x0, 0x0, 0x40, 0x0, [{@multicast1}, {@multicast2}, {@multicast1}, {@empty}]}}) (async) connect$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @null, 0x2}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) (async) 09:40:47 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000004c0)={&(0x7f0000000480)=[0xf, 0x81], 0x2, 0x4, 0x400, 0xffffffff, 0x7fffffff, 0x3f, 0x5, {0x40, 0x8001, 0xe4, 0x20, 0x7, 0x8000, 0xe, 0x0, 0x7fff, 0x6, 0xfffc, 0x3, 0x80000001, 0x1, "a645d7555cd10a6f281c5f5d617b674bb838879c72079148c8aa1f0e778b8e2c"}}) (async, rerun: 64) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (rerun: 64) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000040000000000000003000000186b00000b0000000000000003000000183b0000040000000000000000000000850000000c0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xd7, &(0x7f0000000200)=""/215, 0x40f00, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x4, 0xffff, 0x400}, 0x10, 0x28a0e, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[0xffffffffffffffff]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r2}, 0x10) 09:40:47 executing program 3: ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000000)) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0xfffffffffffffd61, 0x0, 0x1, 0x0, 0x0, 0x4d095}, 0x800) (async) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000}) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48854}, 0xc000) 09:40:47 executing program 0: socketpair(0x23, 0x0, 0x8100000, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @local, @remote}, &(0x7f0000000200)=0xc) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x1, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x1, 0x6, 0x2, 0x6, 0xc, 0xfffffffffffffffc}], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0xb, '\x00', r0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x2, 0x6, 0x5}, 0x10, 0x0, r1, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, r2, 0xffffffffffffffff, r3]}, 0x80) (async) socketpair(0x21, 0x800, 0x5, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f00000003c0)={@multicast2, 0x0, 0x0, 0x40, 0x0, [{@multicast1}, {@multicast2}, {@multicast1}, {@empty}]}}) (async) connect$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @null, 0x2}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) 09:40:47 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x101, 0x4401) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:47 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0}, 0x8800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xa4, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:cgroup_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x400c004}, 0x8094) 09:40:47 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) ioctl$BLKRAGET(r2, 0x1263, &(0x7f00000000c0)) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async, rerun: 32) connect$netrom(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async, rerun: 64) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x402101, 0x0) (rerun: 64) ioctl$BLKFRASET(r4, 0x1264, 0x0) (async) setsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, &(0x7f0000000000)=0x9, 0x4) syz_open_dev$usbmon(&(0x7f0000000140), 0x538, 0x8800) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) 09:40:47 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0xffffffe0, 0x0, 0x2, 0x80, 0x81], 0x5, 0x80400, 0x0, 0xffffffffffffffff}) ioctl$BLKFRASET(r1, 0x1264, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r4, 0x1264, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f0000000140)={0x0, 0x0, r1}) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) 09:40:47 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0}, 0x8800) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xa4, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:cgroup_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x400c004}, 0x8094) 09:40:47 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x7, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000040)={r0, 0x8}) 09:40:47 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0}, 0x8800) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xa4, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:cgroup_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x400c004}, 0x8094) 09:40:47 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000004c0)={&(0x7f0000000480)=[0xf, 0x81], 0x2, 0x4, 0x400, 0xffffffff, 0x7fffffff, 0x3f, 0x5, {0x40, 0x8001, 0xe4, 0x20, 0x7, 0x8000, 0xe, 0x0, 0x7fff, 0x6, 0xfffc, 0x3, 0x80000001, 0x1, "a645d7555cd10a6f281c5f5d617b674bb838879c72079148c8aa1f0e778b8e2c"}}) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000040000000000000003000000186b00000b0000000000000003000000183b0000040000000000000000000000850000000c0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xd7, &(0x7f0000000200)=""/215, 0x40f00, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x4, 0xffff, 0x400}, 0x10, 0x28a0e, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[0xffffffffffffffff]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r2}, 0x10) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) (async) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000004c0)={&(0x7f0000000480)=[0xf, 0x81], 0x2, 0x4, 0x400, 0xffffffff, 0x7fffffff, 0x3f, 0x5, {0x40, 0x8001, 0xe4, 0x20, 0x7, 0x8000, 0xe, 0x0, 0x7fff, 0x6, 0xfffc, 0x3, 0x80000001, 0x1, "a645d7555cd10a6f281c5f5d617b674bb838879c72079148c8aa1f0e778b8e2c"}}) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000040000000000000003000000186b00000b0000000000000003000000183b0000040000000000000000000000850000000c0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xd7, &(0x7f0000000200)=""/215, 0x40f00, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x4, 0xffff, 0x400}, 0x10, 0x28a0e, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[0xffffffffffffffff]}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r2}, 0x10) (async) 09:40:48 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @default, @rose={'rose', 0x0}, 0x4, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xffffffff, 0x2, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) accept4$netrom(r0, &(0x7f0000000080)={{0x3, @null}, [@remote, @default, @rose, @rose, @remote, @bcast, @remote, @default]}, &(0x7f0000000140)=0x48, 0x80800) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:48 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) (async, rerun: 64) ioctl$BLKRAGET(r2, 0x1263, &(0x7f00000000c0)) (async, rerun: 64) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x402101, 0x0) ioctl$BLKFRASET(r4, 0x1264, 0x0) setsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, &(0x7f0000000000)=0x9, 0x4) (async) syz_open_dev$usbmon(&(0x7f0000000140), 0x538, 0x8800) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) 09:40:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) 09:40:48 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @default, @rose={'rose', 0x0}, 0x4, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xffffffff, 0x2, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) accept4$netrom(r0, &(0x7f0000000080)={{0x3, @null}, [@remote, @default, @rose, @rose, @remote, @bcast, @remote, @default]}, &(0x7f0000000140)=0x48, 0x80800) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:48 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0xffffffe0, 0x0, 0x2, 0x80, 0x81], 0x5, 0x80400, 0x0, 0xffffffffffffffff}) ioctl$BLKFRASET(r1, 0x1264, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r4, 0x1264, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f0000000140)={0x0, 0x0, r1}) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0xffffffe0, 0x0, 0x2, 0x80, 0x81], 0x5, 0x80400}) (async) ioctl$BLKFRASET(r1, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r4, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f0000000140)={0x0, 0x0, r1}) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) (async) 09:40:48 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x7, 0x0, 0x10000}) (rerun: 32) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000040)={r0, 0x8}) 09:40:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) 09:40:48 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x0, 0x0, 0x10003}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) bind$x25(0xffffffffffffffff, &(0x7f0000000000), 0x12) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={@rand_addr=0x64010101, 0x1, 0x0, 0x10, 0x0, [{@dev}]}}) connect$netrom(0xffffffffffffffff, 0x0, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000000c0)=0x9, &(0x7f0000000140)=0x4) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:48 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @default, @rose={'rose', 0x0}, 0x4, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xffffffff, 0x2, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) accept4$netrom(r0, &(0x7f0000000080)={{0x3, @null}, [@remote, @default, @rose, @rose, @remote, @bcast, @remote, @default]}, &(0x7f0000000140)=0x48, 0x80800) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:48 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23a6d0a00008f120800a47b1070208c6e97a8ec700ebe73e0e829b119ecee9507d13cfffed056ba1a91fd39a64500", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) 09:40:48 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0xffffffe0, 0x0, 0x2, 0x80, 0x81], 0x5, 0x80400, 0x0, 0xffffffffffffffff}) ioctl$BLKFRASET(r1, 0x1264, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r4, 0x1264, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f0000000140)={0x0, 0x0, r1}) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0xffffffe0, 0x0, 0x2, 0x80, 0x81], 0x5, 0x80400}) (async) ioctl$BLKFRASET(r1, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r4, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f0000000140)={0x0, 0x0, r1}) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) (async) 09:40:48 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x84080) 09:40:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) 09:40:48 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x84080) 09:40:48 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x0, 0x0, 0x10003}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) bind$x25(0xffffffffffffffff, &(0x7f0000000000), 0x12) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={@rand_addr=0x64010101, 0x1, 0x0, 0x10, 0x0, [{@dev}]}}) connect$netrom(0xffffffffffffffff, 0x0, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000000c0)=0x9, &(0x7f0000000140)=0x4) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x0, 0x0, 0x10003}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) bind$x25(0xffffffffffffffff, &(0x7f0000000000), 0x12) (async) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={@rand_addr=0x64010101, 0x1, 0x0, 0x10, 0x0, [{@dev}]}}) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000000c0)=0x9, &(0x7f0000000140)=0x4) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) 09:40:48 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x7, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000040)={r0, 0x8}) 09:40:48 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23a6d0a00008f120800a47b1070208c6e97a8ec700ebe73e0e829b119ecee9507d13cfffed056ba1a91fd39a64500", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) 09:40:48 executing program 0: socketpair(0x23, 0x4, 0x100010, 0x0) 09:40:48 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x84080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x84080) (async) 09:40:48 executing program 0: socketpair(0x23, 0x4, 0x100010, 0x0) socketpair(0x23, 0x4, 0x100010, 0x0) (async) 09:40:48 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000000)=0x89) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:48 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x0, 0x0, 0x10003}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) bind$x25(0xffffffffffffffff, &(0x7f0000000000), 0x12) (async) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={@rand_addr=0x64010101, 0x1, 0x0, 0x10, 0x0, [{@dev}]}}) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000000c0)=0x9, &(0x7f0000000140)=0x4) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:48 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23a6d0a00008f120800a47b1070208c6e97a8ec700ebe73e0e829b119ecee9507d13cfffed056ba1a91fd39a64500", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) 09:40:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) syz_open_dev$loop(&(0x7f0000000200), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000280)=""/164) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r3 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x14b, 0x6, 0xff, 0x9d7, 0xfffffff9], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) accept$netrom(r4, 0x0, &(0x7f00000000c0)) 09:40:48 executing program 3: shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b8400000", @ANYRES16=0x0, @ANYBLOB="010005000000fcdbdf250300000014000300200100000000000000000000000000022600070073797374656d5f753a6f626a6563745f723a7474795f6465766963655f743a7330000000140006006970366772657461703000000000000014000300fc02000000000000000000000000000114000200fc01000000000000000000000000000108000500ac1414aa080004007f00000108000500ac1414bb1400060064756d6d7930000000000000000000006d9566b95363defc05b95ec26254dbb2aca6586bb975d6d9acf5a0432b75ca7b432ad38a0e3822b30c664b058eea8e58afaa7db37db20d10c6eb6c94f8149a30caeca96f6df88cf392615d434a0f191a7cbb8583b9828f0e536467db623db49cede67fb2948f8ca14857a6cf20d6e2e71c3779fa23c614945045f75dda80507266508f"], 0xb8}, 0x1, 0x0, 0x0, 0x44044}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1240114}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x58, r5, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:etc_runtime_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x58}}, 0x8004) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000000040)) 09:40:48 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000180)={0x8, 0x1}) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000140)) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x452002) syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) syz_open_dev$loop(&(0x7f00000001c0), 0x3ff, 0x30700) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f00000004c0)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r4, 0x1264, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f0000000000)='/dev/nvram\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, r2) 09:40:48 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000000)=0x89) (async) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:48 executing program 0: socketpair(0x23, 0x4, 0x100010, 0x0) 09:40:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) syz_open_dev$loop(&(0x7f0000000200), 0x3, 0x0) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000280)=""/164) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r3 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x14b, 0x6, 0xff, 0x9d7, 0xfffffff9], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) accept$netrom(r4, 0x0, &(0x7f00000000c0)) 09:40:48 executing program 3: shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b8400000", @ANYRES16=0x0, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x44044}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1240114}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x58, r5, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:etc_runtime_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x58}}, 0x8004) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000000040)) shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b8400000", @ANYRES16=0x0, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x44044}, 0x4) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r4) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x201}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1240114}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x58, r5, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:etc_runtime_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x58}}, 0x8004) (async) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000000040)) (async) 09:40:48 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000180)={0x8, 0x1}) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000140)) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) (async) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x452002) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) syz_open_dev$loop(&(0x7f00000001c0), 0x3ff, 0x30700) (async) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f00000004c0)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r4, 0x1264, 0x0) (async) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f0000000000)='/dev/nvram\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, r2) 09:40:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) syz_open_dev$loop(&(0x7f0000000200), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000280)=""/164) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r3 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x14b, 0x6, 0xff, 0x9d7, 0xfffffff9], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) accept$netrom(r4, 0x0, &(0x7f00000000c0)) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) syz_open_dev$loop(&(0x7f0000000200), 0x3, 0x0) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) (async) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000280)=""/164) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x14b, 0x6, 0xff, 0x9d7, 0xfffffff9], 0x5, 0x80800}) (async) accept$netrom(r4, 0x0, &(0x7f00000000c0)) (async) 09:40:48 executing program 0: socketpair(0x9, 0x80000, 0x403, 0x0) socketpair(0x11, 0x1, 0x7, &(0x7f0000000040)) r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) 09:40:48 executing program 3: shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b8400000", @ANYRES16=0x0, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x44044}, 0x4) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x201}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1240114}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x58, r5, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:etc_runtime_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x58}}, 0x8004) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000000040)) 09:40:48 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) 09:40:48 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000180)={0x8, 0x1}) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000140)) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x452002) syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) syz_open_dev$loop(&(0x7f00000001c0), 0x3ff, 0x30700) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f00000004c0)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r4, 0x1264, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f0000000000)='/dev/nvram\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) (async) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000180)={0x8, 0x1}) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000140)) (async) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x452002) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) (async) syz_open_dev$loop(&(0x7f00000001c0), 0x3ff, 0x30700) (async) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f00000004c0)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r4, 0x1264, 0x0) (async) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f0000000000)='/dev/nvram\x00') (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) (async) 09:40:48 executing program 0: socketpair(0x9, 0x80000, 0x403, 0x0) (async) socketpair(0x11, 0x1, 0x7, &(0x7f0000000040)) (async) r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) 09:40:48 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000000)=0x89) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000000)=0x89) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) 09:40:48 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x8014) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:48 executing program 0: socketpair(0x9, 0x80000, 0x403, 0x0) (async) socketpair(0x11, 0x1, 0x7, &(0x7f0000000040)) r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) 09:40:48 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x8014) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:48 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x200001) ioctl$BLKROSET(r0, 0x125d, &(0x7f00000000c0)=0x8) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f00000003c0)={'custom1\x00'}) r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x480000, 0x0) ioctl$BLKRAGET(r4, 0x1263, &(0x7f0000000180)) 09:40:48 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) (async) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) 09:40:48 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) bind$netrom(r0, &(0x7f0000000340)={{0x3, @bcast, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x98, 0x1, 0x3, 0x7], 0x4, 0x80800}) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000300)) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000480)) ioctl$ASHMEM_GET_NAME(r4, 0x81007702, &(0x7f0000000140)=""/167) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000040)=0x8000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r5 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000400)={&(0x7f00000003c0)=[0x9, 0x8, 0x7fffffff], 0x3, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r6, 0x28, 0x6, &(0x7f0000000440), 0x10) 09:40:49 executing program 0: setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000000)=0x31f58b2c, 0x4) socketpair(0x23, 0x0, 0x100000, 0x0) 09:40:49 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x200001) ioctl$BLKROSET(r0, 0x125d, &(0x7f00000000c0)=0x8) (async) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f00000003c0)={'custom1\x00'}) (async) r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x480000, 0x0) ioctl$BLKRAGET(r4, 0x1263, &(0x7f0000000180)) 09:40:49 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) bind$netrom(r0, &(0x7f0000000340)={{0x3, @bcast, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (rerun: 32) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) (async) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x98, 0x1, 0x3, 0x7], 0x4, 0x80800}) (async) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000300)) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000480)) (async) ioctl$ASHMEM_GET_NAME(r4, 0x81007702, &(0x7f0000000140)=""/167) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000040)=0x8000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r5 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000400)={&(0x7f00000003c0)=[0x9, 0x8, 0x7fffffff], 0x3, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r6, 0x28, 0x6, &(0x7f0000000440), 0x10) 09:40:49 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) (async) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) (async) 09:40:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x8014) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:49 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) 09:40:49 executing program 0: setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000000)=0x31f58b2c, 0x4) socketpair(0x23, 0x0, 0x100000, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000000)=0x31f58b2c, 0x4) (async) socketpair(0x23, 0x0, 0x100000, 0x0) (async) 09:40:49 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) 09:40:49 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x200001) ioctl$BLKROSET(r0, 0x125d, &(0x7f00000000c0)=0x8) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) (async) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f00000003c0)={'custom1\x00'}) (async) r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x480000, 0x0) ioctl$BLKRAGET(r4, 0x1263, &(0x7f0000000180)) 09:40:49 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x100, 0x401}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) 09:40:49 executing program 0: setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000000)=0x31f58b2c, 0x4) (async) socketpair(0x23, 0x0, 0x100000, 0x0) 09:40:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x201}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='tasks\x00', 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0x24, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x4110}, 0xc1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000040)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x44, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_SECCTX={0x14, 0x7, '/usr/sbin/cupsd\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400200) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0], 0x1, 0x400, 0x0, 0xffffffffffffffff}) ioctl$ASHMEM_PURGE_ALL_CACHES(r8, 0x770a, 0x0) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r9, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:devicekit_disk_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x24004009) 09:40:49 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) bind$netrom(r0, &(0x7f0000000340)={{0x3, @bcast, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x98, 0x1, 0x3, 0x7], 0x4, 0x80800}) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000300)) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000480)) ioctl$ASHMEM_GET_NAME(r4, 0x81007702, &(0x7f0000000140)=""/167) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000040)=0x8000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r5 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000400)={&(0x7f00000003c0)=[0x9, 0x8, 0x7fffffff], 0x3, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r6, 0x28, 0x6, &(0x7f0000000440), 0x10) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) bind$netrom(r0, &(0x7f0000000340)={{0x3, @bcast, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) (async) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x98, 0x1, 0x3, 0x7], 0x4, 0x80800}) (async) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000300)) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) (async) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000480)) (async) ioctl$ASHMEM_GET_NAME(r4, 0x81007702, &(0x7f0000000140)=""/167) (async) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000040)=0x8000) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000400)={&(0x7f00000003c0)=[0x9, 0x8, 0x7fffffff], 0x3}) (async) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r6, 0x28, 0x6, &(0x7f0000000440), 0x10) (async) 09:40:49 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) 09:40:49 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x400) 09:40:49 executing program 0: socketpair(0x27, 0x4, 0x2000008, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000200)=[0x4, 0x4c0, 0xa000006, 0x3], 0x4, 0x763333c33887f386, 0x0, 0xffffffffffffffff}) socketpair(0x2a, 0x3, 0x898, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000100)={'veth1_to_hsr\x00', 0xffffffffffffffe1, 0x1}) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000240)={0x0, @default, @bpq0, 0x8, 'syz1\x00', @default, 0x8, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @bcast]}) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000000)=""/7, 0x7, 0x0, &(0x7f0000000040), 0x12) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x10, r0, 0x5) 09:40:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x201}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='tasks\x00', 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0x24, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x4110}, 0xc1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000040)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x44, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_SECCTX={0x14, 0x7, '/usr/sbin/cupsd\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400200) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0], 0x1, 0x400, 0x0, 0xffffffffffffffff}) ioctl$ASHMEM_PURGE_ALL_CACHES(r8, 0x770a, 0x0) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r9, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:devicekit_disk_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x24004009) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x201}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='tasks\x00', 0x2, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0x24, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x4110}, 0xc1) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000040)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x44, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_SECCTX={0x14, 0x7, '/usr/sbin/cupsd\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400200) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0], 0x1, 0x400}) (async) ioctl$ASHMEM_PURGE_ALL_CACHES(r8, 0x770a, 0x0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r9, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:devicekit_disk_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x24004009) (async) 09:40:49 executing program 0: socketpair(0x27, 0x4, 0x2000008, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000200)=[0x4, 0x4c0, 0xa000006, 0x3], 0x4, 0x763333c33887f386, 0x0, 0xffffffffffffffff}) (async, rerun: 32) socketpair(0x2a, 0x3, 0x898, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000100)={'veth1_to_hsr\x00', 0xffffffffffffffe1, 0x1}) (async) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) (async, rerun: 32) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000240)={0x0, @default, @bpq0, 0x8, 'syz1\x00', @default, 0x8, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @bcast]}) (rerun: 32) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000000)=""/7, 0x7, 0x0, &(0x7f0000000040), 0x12) (async) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x10, r0, 0x5) 09:40:49 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x100, 0x401}) (async) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) 09:40:49 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x2000000000, 0x20a100) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000000)=0x49) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x4, 0xaaa765ea267db8ff, 0xc, 0x5, "d95948da692efcfdd2210a6a10cdc3dca2ba6d45eaa44467e15c36e4993f1cfc0000cd3b1d2fc92fd9f4432db8650edfc1e28ae09e382057cc4458552210685b", "8a0d5ce42d489a05bca153896b934504c882f51157b82543f805acc4d9be5218", [0x5, 0x3]}) 09:40:49 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x400041) 09:40:49 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x400) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x400) (async) 09:40:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3) (async, rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x201}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='tasks\x00', 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0x24, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x4110}, 0xc1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000040)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x44, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_SECCTX={0x14, 0x7, '/usr/sbin/cupsd\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) (async) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400200) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0], 0x1, 0x400, 0x0, 0xffffffffffffffff}) (rerun: 64) ioctl$ASHMEM_PURGE_ALL_CACHES(r8, 0x770a, 0x0) (async) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r9, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:devicekit_disk_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x24004009) 09:40:49 executing program 0: socketpair(0x27, 0x4, 0x2000008, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000200)=[0x4, 0x4c0, 0xa000006, 0x3], 0x4, 0x763333c33887f386, 0x0, 0xffffffffffffffff}) (async, rerun: 64) socketpair(0x2a, 0x3, 0x898, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000100)={'veth1_to_hsr\x00', 0xffffffffffffffe1, 0x1}) (async) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) (async) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000240)={0x0, @default, @bpq0, 0x8, 'syz1\x00', @default, 0x8, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @bcast]}) (async) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000000)=""/7, 0x7, 0x0, &(0x7f0000000040), 0x12) (async) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x10, r0, 0x5) 09:40:49 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async, rerun: 32) r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x2000000000, 0x20a100) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000000)=0x49) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x4, 0xaaa765ea267db8ff, 0xc, 0x5, "d95948da692efcfdd2210a6a10cdc3dca2ba6d45eaa44467e15c36e4993f1cfc0000cd3b1d2fc92fd9f4432db8650edfc1e28ae09e382057cc4458552210685b", "8a0d5ce42d489a05bca153896b934504c882f51157b82543f805acc4d9be5218", [0x5, 0x3]}) (rerun: 32) 09:40:49 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x2000000000, 0x20a100) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000000)=0x49) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x4, 0xaaa765ea267db8ff, 0xc, 0x5, "d95948da692efcfdd2210a6a10cdc3dca2ba6d45eaa44467e15c36e4993f1cfc0000cd3b1d2fc92fd9f4432db8650edfc1e28ae09e382057cc4458552210685b", "8a0d5ce42d489a05bca153896b934504c882f51157b82543f805acc4d9be5218", [0x5, 0x3]}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) syz_open_dev$loop(&(0x7f00000002c0), 0x2000000000, 0x20a100) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000000)=0x49) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x4, 0xaaa765ea267db8ff, 0xc, 0x5, "d95948da692efcfdd2210a6a10cdc3dca2ba6d45eaa44467e15c36e4993f1cfc0000cd3b1d2fc92fd9f4432db8650edfc1e28ae09e382057cc4458552210685b", "8a0d5ce42d489a05bca153896b934504c882f51157b82543f805acc4d9be5218", [0x5, 0x3]}) (async) 09:40:49 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x400041) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x400041) (async) 09:40:49 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x100, 0x401}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x100, 0x401}) (async) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) (async) 09:40:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00z+\x00\x00\x00\x00\x00\x00\x00'], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:lost_found_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) 09:40:49 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x400) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x400) (async) 09:40:49 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000002c0)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00z+\x00\x00\x00\x00\x00\x00\x00'], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:lost_found_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00z+\x00\x00\x00\x00\x00\x00\x00'], 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:lost_found_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) (async) 09:40:49 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000002c0)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:49 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async, rerun: 32) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async, rerun: 32) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x400041) 09:40:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00z+\x00\x00\x00\x00\x00\x00\x00'], 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:lost_found_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) 09:40:50 executing program 0: ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000040)) socketpair(0x5, 0x1, 0x100000, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) 09:40:50 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000180)) ioctl$BLKFRASET(r2, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000000c0)={0x2, 0x0, 0x10001}) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) sendto$x25(r0, &(0x7f00000003c0)="a3f1b7894adef8adb4c8942e5e3d2fc29990fdc97fc5df2ef0afa1c84880003c97be8f581b72080460f6e1b0046e883bc7058ff5b6a5749762c35e35cf61555036b1198e366222eb88141003b89d879e22158de73f8385b5d751a36db25f53b49478c28062c3a92d0c94ae04e88f2e2901ef60dab6937bf0b8c4304129280b4a96c2c98b4bcd5c8c892e0b776ebf3763f989de20593323e11c0521887809f3b10da9f7185590594a6335085b4c2aab9222445d0f205631f276e78249bc536a230cd27d72a442fed8b70aa4bcade4a597b0b24b210ab5b4dda5b28921da7ebb67161df167d8beafe12748a76f5837", 0xee, 0x20004000, &(0x7f0000000140), 0x12) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) 09:40:50 executing program 3: accept4$netrom(0xffffffffffffffff, &(0x7f0000000440)={{0x3, @bcast}, [@default, @default, @null, @bcast, @bcast, @rose, @null, @null]}, &(0x7f00000004c0)=0x48, 0x80000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r7, 0x301, &(0x7f00000006c0)) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000020}, 0x16, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0102000000000000000600000000", @ANYRES32=r7, @ANYRES32=r5, @ANYRESDEC=r0], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xac, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0xac}, 0x1, 0x0, 0x0, 0x8094}, 0x4005) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r8, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:ppp_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20200680}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0xc4, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hald_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0xc4}, 0x1, 0x0, 0x0, 0xc014}, 0x4000000) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x48000) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:50 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) 09:40:50 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x2400) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000002c0)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:50 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x2400) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:50 executing program 3: accept4$netrom(0xffffffffffffffff, &(0x7f0000000440)={{0x3, @bcast}, [@default, @default, @null, @bcast, @bcast, @rose, @null, @null]}, &(0x7f00000004c0)=0x48, 0x80000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r7, 0x301, &(0x7f00000006c0)) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000020}, 0x16, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0102000000000000000600000000", @ANYRES32=r7, @ANYRES32=r5, @ANYRESDEC=r0], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xac, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0xac}, 0x1, 0x0, 0x0, 0x8094}, 0x4005) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r8, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:ppp_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20200680}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0xc4, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hald_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0xc4}, 0x1, 0x0, 0x0, 0xc014}, 0x4000000) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x48000) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) accept4$netrom(0xffffffffffffffff, &(0x7f0000000440)={{0x3, @bcast}, [@default, @default, @null, @bcast, @bcast, @rose, @null, @null]}, &(0x7f00000004c0)=0x48, 0x80000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r4) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r7, 0x301, &(0x7f00000006c0)) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000020}, 0x16, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0102000000000000000600000000", @ANYRES32=r7, @ANYRES32=r5, @ANYRESDEC=r0], 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xac, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0xac}, 0x1, 0x0, 0x0, 0x8094}, 0x4005) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x201}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r8, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:ppp_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x201}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20200680}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0xc4, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hald_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0xc4}, 0x1, 0x0, 0x0, 0xc014}, 0x4000000) (async) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x48000) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) 09:40:50 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000180)) (async) ioctl$BLKFRASET(r2, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000000c0)={0x2, 0x0, 0x10001}) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) sendto$x25(r0, &(0x7f00000003c0)="a3f1b7894adef8adb4c8942e5e3d2fc29990fdc97fc5df2ef0afa1c84880003c97be8f581b72080460f6e1b0046e883bc7058ff5b6a5749762c35e35cf61555036b1198e366222eb88141003b89d879e22158de73f8385b5d751a36db25f53b49478c28062c3a92d0c94ae04e88f2e2901ef60dab6937bf0b8c4304129280b4a96c2c98b4bcd5c8c892e0b776ebf3763f989de20593323e11c0521887809f3b10da9f7185590594a6335085b4c2aab9222445d0f205631f276e78249bc536a230cd27d72a442fed8b70aa4bcade4a597b0b24b210ab5b4dda5b28921da7ebb67161df167d8beafe12748a76f5837", 0xee, 0x20004000, &(0x7f0000000140), 0x12) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) (async) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) 09:40:50 executing program 0: ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000040)) (async) socketpair(0x5, 0x1, 0x100000, 0x0) (async) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) 09:40:50 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x2400) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:50 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) (async) 09:40:50 executing program 0: ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000040)) socketpair(0x5, 0x1, 0x100000, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000040)) (async) socketpair(0x5, 0x1, 0x100000, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) (async) 09:40:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x410440, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000200)=""/166) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r3 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000140)=0x8) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000180)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x400880, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x5}) 09:40:50 executing program 3: accept4$netrom(0xffffffffffffffff, &(0x7f0000000440)={{0x3, @bcast}, [@default, @default, @null, @bcast, @bcast, @rose, @null, @null]}, &(0x7f00000004c0)=0x48, 0x80000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r7, 0x301, &(0x7f00000006c0)) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000020}, 0x16, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0102000000000000000600000000", @ANYRES32=r7, @ANYRES32=r5, @ANYRESDEC=r0], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xac, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0xac}, 0x1, 0x0, 0x0, 0x8094}, 0x4005) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r8, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:ppp_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20200680}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0xc4, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hald_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0xc4}, 0x1, 0x0, 0x0, 0xc014}, 0x4000000) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x48000) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) accept4$netrom(0xffffffffffffffff, &(0x7f0000000440)={{0x3, @bcast}, [@default, @default, @null, @bcast, @bcast, @rose, @null, @null]}, &(0x7f00000004c0)=0x48, 0x80000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r4) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r7, 0x301, &(0x7f00000006c0)) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000020}, 0x16, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0102000000000000000600000000", @ANYRES32=r7, @ANYRES32=r5, @ANYRESDEC=r0], 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xac, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0xac}, 0x1, 0x0, 0x0, 0x8094}, 0x4005) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x201}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r8, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:ppp_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x201}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20200680}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0xc4, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hald_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0xc4}, 0x1, 0x0, 0x0, 0xc014}, 0x4000000) (async) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x48000) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) 09:40:50 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000180)) ioctl$BLKFRASET(r2, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000000c0)={0x2, 0x0, 0x10001}) (async) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) sendto$x25(r0, &(0x7f00000003c0)="a3f1b7894adef8adb4c8942e5e3d2fc29990fdc97fc5df2ef0afa1c84880003c97be8f581b72080460f6e1b0046e883bc7058ff5b6a5749762c35e35cf61555036b1198e366222eb88141003b89d879e22158de73f8385b5d751a36db25f53b49478c28062c3a92d0c94ae04e88f2e2901ef60dab6937bf0b8c4304129280b4a96c2c98b4bcd5c8c892e0b776ebf3763f989de20593323e11c0521887809f3b10da9f7185590594a6335085b4c2aab9222445d0f205631f276e78249bc536a230cd27d72a442fed8b70aa4bcade4a597b0b24b210ab5b4dda5b28921da7ebb67161df167d8beafe12748a76f5837", 0xee, 0x20004000, &(0x7f0000000140), 0x12) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) (async, rerun: 64) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) (rerun: 64) 09:40:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x410440, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000200)=""/166) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r3 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000140)=0x8) (async) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000180)) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x400880, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x5}) 09:40:50 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0xb, 'veth0_vlan\x00'}) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x2a2441) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) 09:40:50 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000)=0x1, 0x4) 09:40:50 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) (async) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0xb, 'veth0_vlan\x00'}) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x2a2441) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) 09:40:50 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048010}, 0x4048040) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0xfce8}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000004) 09:40:50 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x6541) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x410440, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) (async) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000200)=""/166) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) r3 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000140)=0x8) (async) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000180)) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x400880, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x5}) 09:40:50 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) (async) 09:40:50 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0xb, 'veth0_vlan\x00'}) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x2a2441) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r1, 0x1264, 0x0) (async) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0xb, 'veth0_vlan\x00'}) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x2a2441) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) (async) 09:40:50 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000)=0x1, 0x4) socketpair(0x23, 0x0, 0x100000, 0x0) (async) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000)=0x1, 0x4) (async) 09:40:50 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000)=0x1, 0x4) socketpair(0x23, 0x0, 0x100000, 0x0) (async) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000)=0x1, 0x4) (async) 09:40:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0xbb0, 0x40841) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f00000001c0)=0x1, 0x4) openat$md(0xffffffffffffff9c, &(0x7f0000000180), 0x40001, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x9e1c, 0x80300) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f00000000c0)=""/164) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000200)) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:50 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x6541) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$md(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x6541) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) 09:40:50 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6400) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) 09:40:50 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1000}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x74}}, 0x40000000) 09:40:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0xbb0, 0x40841) (async) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f00000001c0)=0x1, 0x4) openat$md(0xffffffffffffff9c, &(0x7f0000000180), 0x40001, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x9e1c, 0x80300) (async) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f00000000c0)=""/164) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000200)) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:50 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048010}, 0x4048040) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0xfce8}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000004) 09:40:50 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6400) (async) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) (async) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) 09:40:50 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1000}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x74}}, 0x40000000) 09:40:50 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000180)) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000000)={0xffff, 0x80000001}) 09:40:50 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x6541) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async, rerun: 32) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (rerun: 32) 09:40:50 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1000}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x74}}, 0x40000000) socketpair(0x23, 0x0, 0x100000, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1000}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x74}}, 0x40000000) (async) 09:40:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0xbb0, 0x40841) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f00000001c0)=0x1, 0x4) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000180), 0x40001, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x9e1c, 0x80300) (async) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f00000000c0)=""/164) (async) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000200)) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:50 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)) r3 = accept4$x25(r0, 0x0, &(0x7f0000000000), 0x0) ioctl$SIOCX25GDTEFACILITIES(r3, 0x89ea, &(0x7f00000000c0)) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:50 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6400) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6400) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000006c0)) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) (async) 09:40:50 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) connect$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x280000, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 09:40:50 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048010}, 0x4048040) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0xfce8}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000004) 09:40:50 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) connect$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x280000, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair(0x23, 0x0, 0x100000, 0x0) (async) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) (async) connect$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x280000, 0x0) (async) ioctl$LOOP_CLR_FD(r0, 0x4c01) (async) 09:40:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r4, 0x1264, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000012c0)={&(0x7f0000001280)=[0x6502, 0x1, 0x5, 0xffff, 0x8000, 0xa9, 0xaf, 0x5, 0xdea0], 0x9, 0x40000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000013c0)={&(0x7f0000001380)=[0x8, 0xfffffffc, 0x1, 0x9], 0x4, 0x800, 0x0, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_ext={0x1c, 0xe, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, @exit, @map_val={0x18, 0x1, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6f0}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x7c}, @map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000000c0)='GPL\x00', 0x20, 0x1000, &(0x7f0000000280)=""/4096, 0x41100, 0x8, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000001300)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001340)={0xfffffffe, 0xf, 0x8000}, 0x10, 0x21c67, 0xffffffffffffffff, 0x0, &(0x7f0000001400)=[r3, r3, r3, r3, r3, r2, r6]}, 0x80) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000040)={0x7, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 09:40:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) 09:40:50 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000180)) (async, rerun: 64) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async, rerun: 64) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) (async, rerun: 64) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000000)={0xffff, 0x80000001}) (rerun: 64) 09:40:51 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async, rerun: 32) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async, rerun: 64) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (rerun: 64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)) r3 = accept4$x25(r0, 0x0, &(0x7f0000000000), 0x0) ioctl$SIOCX25GDTEFACILITIES(r3, 0x89ea, &(0x7f00000000c0)) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:51 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) connect$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x280000, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair(0x23, 0x0, 0x100000, 0x0) (async) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) (async) connect$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x280000, 0x0) (async) ioctl$LOOP_CLR_FD(r0, 0x4c01) (async) 09:40:51 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (rerun: 64) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async, rerun: 32) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r4, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000012c0)={&(0x7f0000001280)=[0x6502, 0x1, 0x5, 0xffff, 0x8000, 0xa9, 0xaf, 0x5, 0xdea0], 0x9, 0x40000, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000013c0)={&(0x7f0000001380)=[0x8, 0xfffffffc, 0x1, 0x9], 0x4, 0x800, 0x0, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_ext={0x1c, 0xe, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, @exit, @map_val={0x18, 0x1, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6f0}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x7c}, @map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000000c0)='GPL\x00', 0x20, 0x1000, &(0x7f0000000280)=""/4096, 0x41100, 0x8, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000001300)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001340)={0xfffffffe, 0xf, 0x8000}, 0x10, 0x21c67, 0xffffffffffffffff, 0x0, &(0x7f0000001400)=[r3, r3, r3, r3, r3, r2, r6]}, 0x80) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000040)={0x7, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 09:40:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) 09:40:51 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0xeb, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:51 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x700, 0x1, 0x7, 0x9, {{0x20, 0x4, 0x1, 0x0, 0x80, 0x64, 0x0, 0x93, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @local, {[@timestamp_prespec={0x44, 0x4, 0xa7, 0x3, 0x6}, @noop, @ra={0x94, 0x4}, @cipso={0x86, 0x62, 0x2, [{0x1, 0x7, "e066048847"}, {0x2, 0xc, "338b27bfb90f088bad65"}, {0x7, 0x8, "336913f9cc6e"}, {0x0, 0x10, "7e69e1760097a4cf1340d7516aac"}, {0x2, 0xb, "f7abe6c53e9c9776b6"}, {0x2, 0x2}, {0x7, 0xc, "87361466d1958403ea4f"}, {0x1, 0xc, "6f701993b37ec327654b"}, {0x2, 0xc, "a5cc70676c8139ed3b36"}]}, @end]}}}}}) socketpair(0x11, 0x6, 0x4, &(0x7f0000000180)) 09:40:51 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)) r3 = accept4$x25(r0, 0x0, &(0x7f0000000000), 0x0) ioctl$SIOCX25GDTEFACILITIES(r3, 0x89ea, &(0x7f00000000c0)) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) (async) 09:40:51 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r4, 0x1264, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000012c0)={&(0x7f0000001280)=[0x6502, 0x1, 0x5, 0xffff, 0x8000, 0xa9, 0xaf, 0x5, 0xdea0], 0x9, 0x40000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000013c0)={&(0x7f0000001380)=[0x8, 0xfffffffc, 0x1, 0x9], 0x4, 0x800, 0x0, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_ext={0x1c, 0xe, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, @exit, @map_val={0x18, 0x1, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6f0}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x7c}, @map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000000c0)='GPL\x00', 0x20, 0x1000, &(0x7f0000000280)=""/4096, 0x41100, 0x8, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000001300)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001340)={0xfffffffe, 0xf, 0x8000}, 0x10, 0x21c67, 0xffffffffffffffff, 0x0, &(0x7f0000001400)=[r3, r3, r3, r3, r3, r2, r6]}, 0x80) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000040)={0x7, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r3, 0x1264, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r4, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000012c0)={&(0x7f0000001280)=[0x6502, 0x1, 0x5, 0xffff, 0x8000, 0xa9, 0xaf, 0x5, 0xdea0], 0x9, 0x40000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000013c0)={&(0x7f0000001380)=[0x8, 0xfffffffc, 0x1, 0x9], 0x4, 0x800}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_ext={0x1c, 0xe, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, @exit, @map_val={0x18, 0x1, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6f0}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x7c}, @map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000000c0)='GPL\x00', 0x20, 0x1000, &(0x7f0000000280)=""/4096, 0x41100, 0x8, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000001300)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001340)={0xfffffffe, 0xf, 0x8000}, 0x10, 0x21c67, 0xffffffffffffffff, 0x0, &(0x7f0000001400)=[r3, r3, r3, r3, r3, r2, r6]}, 0x80) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000040)={0x7, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) 09:40:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa8, r2, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:dhcpc_var_run_t:s0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x200008d4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 09:40:51 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x700, 0x1, 0x7, 0x9, {{0x20, 0x4, 0x1, 0x0, 0x80, 0x64, 0x0, 0x93, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @local, {[@timestamp_prespec={0x44, 0x4, 0xa7, 0x3, 0x6}, @noop, @ra={0x94, 0x4}, @cipso={0x86, 0x62, 0x2, [{0x1, 0x7, "e066048847"}, {0x2, 0xc, "338b27bfb90f088bad65"}, {0x7, 0x8, "336913f9cc6e"}, {0x0, 0x10, "7e69e1760097a4cf1340d7516aac"}, {0x2, 0xb, "f7abe6c53e9c9776b6"}, {0x2, 0x2}, {0x7, 0xc, "87361466d1958403ea4f"}, {0x1, 0xc, "6f701993b37ec327654b"}, {0x2, 0xc, "a5cc70676c8139ed3b36"}]}, @end]}}}}}) socketpair(0x11, 0x6, 0x4, &(0x7f0000000180)) socketpair(0x23, 0x0, 0x100000, 0x0) (async) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x700, 0x1, 0x7, 0x9, {{0x20, 0x4, 0x1, 0x0, 0x80, 0x64, 0x0, 0x93, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @local, {[@timestamp_prespec={0x44, 0x4, 0xa7, 0x3, 0x6}, @noop, @ra={0x94, 0x4}, @cipso={0x86, 0x62, 0x2, [{0x1, 0x7, "e066048847"}, {0x2, 0xc, "338b27bfb90f088bad65"}, {0x7, 0x8, "336913f9cc6e"}, {0x0, 0x10, "7e69e1760097a4cf1340d7516aac"}, {0x2, 0xb, "f7abe6c53e9c9776b6"}, {0x2, 0x2}, {0x7, 0xc, "87361466d1958403ea4f"}, {0x1, 0xc, "6f701993b37ec327654b"}, {0x2, 0xc, "a5cc70676c8139ed3b36"}]}, @end]}}}}}) (async) socketpair(0x11, 0x6, 0x4, &(0x7f0000000180)) (async) 09:40:51 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000180)) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) (async, rerun: 32) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000000)={0xffff, 0x80000001}) (rerun: 32) 09:40:51 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0xeb, 0x6000) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:51 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x700, 0x1, 0x7, 0x9, {{0x20, 0x4, 0x1, 0x0, 0x80, 0x64, 0x0, 0x93, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @local, {[@timestamp_prespec={0x44, 0x4, 0xa7, 0x3, 0x6}, @noop, @ra={0x94, 0x4}, @cipso={0x86, 0x62, 0x2, [{0x1, 0x7, "e066048847"}, {0x2, 0xc, "338b27bfb90f088bad65"}, {0x7, 0x8, "336913f9cc6e"}, {0x0, 0x10, "7e69e1760097a4cf1340d7516aac"}, {0x2, 0xb, "f7abe6c53e9c9776b6"}, {0x2, 0x2}, {0x7, 0xc, "87361466d1958403ea4f"}, {0x1, 0xc, "6f701993b37ec327654b"}, {0x2, 0xc, "a5cc70676c8139ed3b36"}]}, @end]}}}}}) (async) socketpair(0x11, 0x6, 0x4, &(0x7f0000000180)) 09:40:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa8, r2, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:dhcpc_var_run_t:s0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x200008d4) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 09:40:51 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x43ff, 0x0, 0x10001}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x3f, 0x43a2c4) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) r4 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f00000006c0)) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f00000006c0)) r5 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$BLKRAGET(r5, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:51 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x111800, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x7) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000000200)={'pimreg\x00', 0x5, 0x8}) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa8, r2, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:dhcpc_var_run_t:s0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x200008d4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa8, r2, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:dhcpc_var_run_t:s0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x200008d4) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x201}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) 09:40:52 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x43ff, 0x0, 0x10001}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x3f, 0x43a2c4) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) r4 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f00000006c0)) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f00000006c0)) r5 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$BLKRAGET(r5, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x43ff, 0x0, 0x10001}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000680), 0x3f, 0x43a2c4) (async) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f00000006c0)) (async) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f00000006c0)) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) ioctl$BLKRAGET(r5, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) 09:40:52 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) bind$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @bcast, 0x3}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) 09:40:52 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) socket$inet(0x2, 0x4, 0x3) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) 09:40:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe4, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:adjtime_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:pam_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4014}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="7911944e10bde57327c1631b3aec973ede8938a95d7544c55e2854756c3578a71b3786d4b6fd62cb6e5cc7f2587d3c8c098e88f24d1a1800deecf550cff7b522575e07ff71135cdb0fc157ebf9ba22e8bbad6744295c42760c493c7f6e9ab1d4b2d6b9bd25cdf5852bf24d814704f5a3a273aef1fba5362a6513007be41f24a1d2a5c960b0defaa90773dad52481f629cec8c5bed433f6cc1ce1bb44034873df847f3cb8dd244e0e306d7268f845ab290acab7419cae237a7da84ae54e1ba51d5b6d34d788d42d122ab37093aeae381eb349e1cae63416ee258486b9f092be7300658110521f88f8399a1947efef9430a3fbb6740f0b75f81e6e6030821b152f491e22391775", @ANYRES16=0x0, @ANYBLOB="120027bd7000fbdbdf25080000001400060076657468315f746f5f62617461647600140003000000000000000000000000000000000008000400ac1414bb14000300fc010000000000000000000000000001"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc840}, 0x44801) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x12}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000040) 09:40:52 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x111800, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x7) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000000200)={'pimreg\x00', 0x5, 0x8}) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x111800, 0x0) (async) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x7) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r3, 0x1264, 0x0) (async) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000000200)={'pimreg\x00', 0x5, 0x8}) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 09:40:52 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) bind$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @bcast, 0x3}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) 09:40:52 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0xeb, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0xeb, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) 09:40:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe4, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:adjtime_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:pam_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4014}, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="120027bd7000fbdbdf25080000001400060076657468315f746f5f62617461647600140003000000000000000000000000000000000008000400ac1414bb14000300fc010000000000000000000000000001"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc840}, 0x44801) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x12}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000040) 09:40:52 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x111800, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x7) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) (async) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000000200)={'pimreg\x00', 0x5, 0x8}) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:52 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000040)) r0 = syz_open_dev$loop(&(0x7f0000000080), 0xe6c, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:52 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) bind$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @bcast, 0x3}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) socketpair(0x23, 0x0, 0x100000, 0x0) (async) bind$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @bcast, 0x3}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) (async) 09:40:52 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x43ff, 0x0, 0x10001}) (async) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x3f, 0x43a2c4) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) (async) r4 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f00000006c0)) (async, rerun: 64) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f00000006c0)) (async, rerun: 64) r5 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$BLKRAGET(r5, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe4, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:adjtime_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:pam_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4014}, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="120027bd7000fbdbdf25080000001400060076657468315f746f5f62617461647600140003000000000000000000000000000000000008000400ac1414bb14000300fc010000000000000000000000000001"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc840}, 0x44801) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x12}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000040) 09:40:52 executing program 1: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{}, [@netrom, @bcast, @null, @netrom, @rose, @remote, @bcast, @bcast]}, &(0x7f00000000c0)=0x48) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x602, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000240)) 09:40:52 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) socket$inet(0x2, 0x4, 0x3) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) 09:40:52 executing program 0: socketpair(0x23, 0x80000, 0x100000, 0x0) 09:40:52 executing program 0: socketpair(0x23, 0x80000, 0x100000, 0x0) 09:40:52 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000000)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000180)={&(0x7f00000000c0), &(0x7f0000000140)}) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:52 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000040)) (async, rerun: 32) r0 = syz_open_dev$loop(&(0x7f0000000080), 0xe6c, 0x6000) (rerun: 32) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:52 executing program 1: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{}, [@netrom, @bcast, @null, @netrom, @rose, @remote, @bcast, @bcast]}, &(0x7f00000000c0)=0x48) (async) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x602, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000240)) 09:40:52 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000000)={0x8}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000180)={&(0x7f00000000c0), &(0x7f0000000140)}) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa0, r1, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:gpg_helper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0xa0}, 0x1, 0x0, 0x0, 0x14}, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x6400100}, 0xc, &(0x7f0000000580)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x1c000}, 0x4084) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdf250400000014000300200100000000000000000000000000022c00070073797374656d5f753a6f626a6563745f723a70616d5f636f6e736f6c655f657865635f743a7330001400dc3c6f245fbfff7ba006f95a0600776c616e3100000000000000000000001400060076657468300000000000010000000000000001000100000014000300ff010000000000090000000000000001140016ce0e4e63736563300000000000000000000500010001000000"], 0xb4}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, r1, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip_vti0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1b}}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:mqueue_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x80) 09:40:52 executing program 0: socketpair(0x23, 0x80000, 0x100000, 0x0) 09:40:52 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000040)) r0 = syz_open_dev$loop(&(0x7f0000000080), 0xe6c, 0x6000) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:52 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) socketpair(0x2c, 0x6, 0x7, &(0x7f0000000000)) 09:40:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa0, r1, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:gpg_helper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0xa0}, 0x1, 0x0, 0x0, 0x14}, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x6400100}, 0xc, &(0x7f0000000580)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x1c000}, 0x4084) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdf250400000014000300200100000000000000000000000000022c00070073797374656d5f753a6f626a6563745f723a70616d5f636f6e736f6c655f657865635f743a7330001400dc3c6f245fbfff7ba006f95a0600776c616e3100000000000000000000001400060076657468300000000000010000000000000001000100000014000300ff010000000000090000000000000001140016ce0e4e63736563300000000000000000000500010001000000"], 0xb4}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, r1, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip_vti0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1b}}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:mqueue_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa0, r1, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:gpg_helper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0xa0}, 0x1, 0x0, 0x0, 0x14}, 0x1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x6400100}, 0xc, &(0x7f0000000580)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x1c000}, 0x4084) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdf250400000014000300200100000000000000000000000000022c00070073797374656d5f753a6f626a6563745f723a70616d5f636f6e736f6c655f657865635f743a7330001400dc3c6f245fbfff7ba006f95a0600776c616e3100000000000000000000001400060076657468300000000000010000000000000001000100000014000300ff010000000000090000000000000001140016ce0e4e63736563300000000000000000000500010001000000"], 0xb4}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, r1, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip_vti0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1b}}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:mqueue_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) 09:40:52 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) socket$inet(0x2, 0x4, 0x3) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) socket$inet(0x2, 0x4, 0x3) (async) syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) (async) [ 1916.848726] nla_parse: 7 callbacks suppressed [ 1916.848733] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 09:40:52 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000000)={0x8}) (async) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async, rerun: 32) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async, rerun: 32) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000180)={&(0x7f00000000c0), &(0x7f0000000140)}) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:52 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000000)={0x2}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={r0}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x101, 0x240783) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 09:40:52 executing program 1: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{}, [@netrom, @bcast, @null, @netrom, @rose, @remote, @bcast, @bcast]}, &(0x7f00000000c0)=0x48) (async) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x602, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000240)) 09:40:52 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000000)={0x2}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={r0}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x101, 0x240783) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000000)={0x2}) (async) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={r0}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x101, 0x240783) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) 09:40:52 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) socketpair(0x2c, 0x6, 0x7, &(0x7f0000000000)) 09:40:52 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000200)={0x4, 0x0, 0x2}) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) [ 1916.990334] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 09:40:52 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x582a8db2, 0x200000) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa0, r1, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:gpg_helper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0xa0}, 0x1, 0x0, 0x0, 0x14}, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x6400100}, 0xc, &(0x7f0000000580)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x1c000}, 0x4084) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdf250400000014000300200100000000000000000000000000022c00070073797374656d5f753a6f626a6563745f723a70616d5f636f6e736f6c655f657865635f743a7330001400dc3c6f245fbfff7ba006f95a0600776c616e3100000000000000000000001400060076657468300000000000010000000000000001000100000014000300ff010000000000090000000000000001140016ce0e4e63736563300000000000000000000500010001000000"], 0xb4}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, r1, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip_vti0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1b}}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:mqueue_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa0, r1, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:gpg_helper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0xa0}, 0x1, 0x0, 0x0, 0x14}, 0x1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x6400100}, 0xc, &(0x7f0000000580)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x1c000}, 0x4084) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdf250400000014000300200100000000000000000000000000022c00070073797374656d5f753a6f626a6563745f723a70616d5f636f6e736f6c655f657865635f743a7330001400dc3c6f245fbfff7ba006f95a0600776c616e3100000000000000000000001400060076657468300000000000010000000000000001000100000014000300ff010000000000090000000000000001140016ce0e4e63736563300000000000000000000500010001000000"], 0xb4}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, r1, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip_vti0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1b}}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:mqueue_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) 09:40:52 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000000)={0x2}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={r0}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x101, 0x240783) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000000)={0x2}) (async) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={r0}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x101, 0x240783) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) 09:40:52 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) socketpair(0x2c, 0x6, 0x7, &(0x7f0000000000)) socketpair(0x23, 0x0, 0x100000, 0x0) (async) socketpair(0x2c, 0x6, 0x7, &(0x7f0000000000)) (async) 09:40:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) [ 1917.079974] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 09:40:52 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000440), 0x451800, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x801, 0x0) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000340)=0x1) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000180)) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f00000006c0)) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0x2, 0x9, 0x17, 0x1, "b6fe0bd8834ec132c509f70a90b3eb8fa8631a933447884444d1c9321a7304e10b837f9d90dc60604b2acd4e367967954be16386b0ad345705a5c412ba94f724", "d318542314b89979e78a87a3cf047ee949f8779c99a6ce842cb37931b3a3f924", [0x5, 0x9]}) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f0000000380)) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000400)) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) r5 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r5, 0x301, &(0x7f00000006c0)) ioctl$BLKPBSZGET(r5, 0x127b, &(0x7f00000003c0)) 09:40:52 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) syz_open_dev$loop(&(0x7f0000000000), 0x582a8db2, 0x200000) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:52 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) 09:40:52 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) 09:40:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:52 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) socketpair(0x23, 0x0, 0x100000, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) (async) 09:40:52 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000200)={0x4, 0x0, 0x2}) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKFRASET(r1, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000200)={0x4, 0x0, 0x2}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) (async) 09:40:52 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) (async) 09:40:53 executing program 0: socketpair(0x23, 0x0, 0x100000, 0x0) (async) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) 09:40:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0) 09:40:53 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) syz_open_dev$loop(&(0x7f0000000000), 0x582a8db2, 0x200000) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:53 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) (async, rerun: 32) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) (rerun: 32) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) 09:40:53 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000200)={0x4, 0x0, 0x2}) (async, rerun: 64) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async, rerun: 32) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) 09:40:53 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000440), 0x451800, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x801, 0x0) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000340)=0x1) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000180)) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f00000006c0)) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0x2, 0x9, 0x17, 0x1, "b6fe0bd8834ec132c509f70a90b3eb8fa8631a933447884444d1c9321a7304e10b837f9d90dc60604b2acd4e367967954be16386b0ad345705a5c412ba94f724", "d318542314b89979e78a87a3cf047ee949f8779c99a6ce842cb37931b3a3f924", [0x5, 0x9]}) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f0000000380)) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000400)) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) r5 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r5, 0x301, &(0x7f00000006c0)) ioctl$BLKPBSZGET(r5, 0x127b, &(0x7f00000003c0)) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000440), 0x451800, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x801, 0x0) (async) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000340)=0x1) (async) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000180)) (async) syz_open_dev$loop(&(0x7f0000000040), 0x19, 0x0) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f00000006c0)) (async) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0x2, 0x9, 0x17, 0x1, "b6fe0bd8834ec132c509f70a90b3eb8fa8631a933447884444d1c9321a7304e10b837f9d90dc60604b2acd4e367967954be16386b0ad345705a5c412ba94f724", "d318542314b89979e78a87a3cf047ee949f8779c99a6ce842cb37931b3a3f924", [0x5, 0x9]}) (async) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f0000000380)) (async) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000400)) (async) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "d8a8fd0cfcaafad6e7554fc8d4b23ad14e3b5b8f12025ca47b10944d8c6e97a8ed700ebe73e0e829b119eca3ebf071e12f846756e300267af9ba1a91fd39a645", "fcef7fd4fde0dd9195c31419023f4d4e5598e5335f76936a275d6c961e85a262"}) (async) syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r5, 0x301, &(0x7f00000006c0)) (async) ioctl$BLKPBSZGET(r5, 0x127b, &(0x7f00000003c0)) (async) 09:40:53 executing program 0: socketpair(0x28, 0x4, 0x100000, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x2000003, 0x0, '\x00', 0x1, 0x5}) 09:40:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="994bcc34", @ANYRES16=r2, @ANYBLOB="0102000000000000000006000000"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="000432bc7000fcdbdf250300000014000300fc01000000000000000000000000000008000500ac1414bb2600070073797374656d5f7d3a65766963655f743a733000000008000500640101145ee9af6c076f626a6563745f723a68756765746c6266735f743a73300000000000b800000000"], 0x88}}, 0x140488c4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)={0x64, r5, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:lib_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2e, 0x7, 'system_u:object_r:netlabel_mgmt_exec_t:s0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000000280)={&(0x7f0000000140), 0x51, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe}, 0x14}}, 0x20000000) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0}, 0x2404c001) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000840)={0x8c, r8, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:zero_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x39}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x81}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r10, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000000dbbaeda90b412391ed5cb9f4f64db1b5a7ff7f16127345ffe51f3b219a2a66e4e32c4a1b91201526fa1466920f8c0becc64f3a4d901a5c2216003b71fd0d3f11742480f8dd0c5bad4d0a6d20d8327d268de680977a54e584810095923a28012844f55ddbac43fbec5b0b91050a18882fcf6e78ce385688e4f17a42a4e0070e0aef2d826f18f7cc50081d96c05e1f95efb4ee570367037b958d1c4093413d4785cf4d262a8dff5b5ae2c790c7a71269a3519e2227e4a1e2672a59c439cadfd5973cdf2250799e5da43b7acdee26e2786adc6d2b841be566cfa82f488c52ee6961d4a9012c32164fbecc218227a0e20f150403bef5e79bc531af85675e6a81e5e164b2ab53d91188294be69223d9ed779acc079ac980b60c55317c21c55666a0085547b82ddbd74f441d7d00f1ce568cda61ab66ccfef1875d4a4ef2002e1903244c89352fca9e585a065c02eccc4f891b1ed3af2b1ca7742833d48b1dea7a1dac110351edece202a470453871f041603566e6c87b0a8e8aa15e5427a6b21046d7f9c711f6d6b73ce126f14dd3f74cd1f40da41cd214129aad2271d3ee00adfb688dabb03355cced5a449fbf49d620082c31ed3b4829fd8ef77c33e73abfff39e023e0f6895d7535897b1bb97d1000000080681b125d14c914c6446f4014a0a1d1d8a21f32e5d5205e0e626b657e958dea7b0f86662a2b916d8784a6783907699c9d5382d7046ba5751ba9a6d8a4e3738b765dac3f841b51dc2c165c46cd4cd02273df2bda5788ffd674deba339e62f6f81ffee286f4b25915", @ANYRES16=0x0, @ANYBLOB="10002bbd7000fddbdf25020000001400020020010000000000000000000000000002"], 0x28}, 0x1, 0x0, 0x0, 0x4004800}, 0x40080) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000240)) 09:40:53 executing program 0: socketpair(0x28, 0x4, 0x100000, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x2000003, 0x0, '\x00', 0x1, 0x5}) 09:40:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="994bcc34", @ANYRES16=r2, @ANYBLOB="0102000000000000000006000000"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="000432bc7000fcdbdf250300000014000300fc01000000000000000000000000000008000500ac1414bb2600070073797374656d5f7d3a65766963655f743a733000000008000500640101145ee9af6c076f626a6563745f723a68756765746c6266735f743a73300000000000b800000000"], 0x88}}, 0x140488c4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)={0x64, r5, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:lib_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2e, 0x7, 'system_u:object_r:netlabel_mgmt_exec_t:s0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000000280)={&(0x7f0000000140), 0x51, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe}, 0x14}}, 0x20000000) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0}, 0x2404c001) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000840)={0x8c, r8, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:zero_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x39}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x81}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r10, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="10002bbd7000fddbdf25020000001400020020010000000000000000000000000002"], 0x28}, 0x1, 0x0, 0x0, 0x4004800}, 0x40080) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000240)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="994bcc34", @ANYRES16=r2, @ANYBLOB="0102000000000000000006000000"], 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="000432bc7000fcdbdf250300000014000300fc01000000000000000000000000000008000500ac1414bb2600070073797374656d5f7d3a65766963655f743a733000000008000500640101145ee9af6c076f626a6563745f723a68756765746c6266735f743a73300000000000b800000000"], 0x88}}, 0x140488c4) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), r3) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)={0x64, r5, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:lib_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2e, 0x7, 'system_u:object_r:netlabel_mgmt_exec_t:s0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000000280)={&(0x7f0000000140), 0x51, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe}, 0x14}}, 0x20000000) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0}, 0x2404c001) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r7) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x201}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000840)={0x8c, r8, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:zero_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x39}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x81}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_LIST(r10, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="10002bbd7000fddbdf25020000001400020020010000000000000000000000000002"], 0x28}, 0x1, 0x0, 0x0, 0x4004800}, 0x40080) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000240)) (async) 09:40:53 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 09:40:53 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000700), 0xfffffffffffffffe, 0x0) ioctl$MON_IOCX_GET(r2, 0x40189206, 0x0) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000006c0)) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000200)) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000140)=""/161) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:40:53 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$BLKFRASET(r1, 0x1264, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r4, 0x1264, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r4}) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r5, 0x4c00, r2) 09:40:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="994bcc34", @ANYRES16=r2, @ANYBLOB="0102000000000000000006000000"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="000432bc7000fcdbdf250300000014000300fc01000000000000000000000000000008000500ac1414bb2600070073797374656d5f7d3a65766963655f743a733000000008000500640101145ee9af6c076f626a6563745f723a68756765746c6266735f743a73300000000000b800000000"], 0x88}}, 0x140488c4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)={0x64, r5, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:lib_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2e, 0x7, 'system_u:object_r:netlabel_mgmt_exec_t:s0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000000280)={&(0x7f0000000140), 0x51, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe}, 0x14}}, 0x20000000) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0}, 0x2404c001) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000840)={0x8c, r8, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:zero_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x39}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x81}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r10, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="10002bbd7000fddbdf25020000001400020020010000000000000000000000000002"], 0x28}, 0x1, 0x0, 0x0, 0x4004800}, 0x40080) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000240)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="994bcc34", @ANYRES16=r2, @ANYBLOB="0102000000000000000006000000"], 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="000432bc7000fcdbdf250300000014000300fc01000000000000000000000000000008000500ac1414bb2600070073797374656d5f7d3a65766963655f743a733000000008000500640101145ee9af6c076f626a6563745f723a68756765746c6266735f743a73300000000000b800000000"], 0x88}}, 0x140488c4) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), r3) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)={0x64, r5, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:lib_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2e, 0x7, 'system_u:object_r:netlabel_mgmt_exec_t:s0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000000280)={&(0x7f0000000140), 0x51, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe}, 0x14}}, 0x20000000) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0}, 0x2404c001) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r7) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x201}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000840)={0x8c, r8, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:zero_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x39}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x81}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_LIST(r10, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="10002bbd7000fddbdf25020000001400020020010000000000000000000000000002"], 0x28}, 0x1, 0x0, 0x0, 0x4004800}, 0x40080) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000240)) (async) 09:40:53 executing program 0: socketpair(0x28, 0x4, 0x100000, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x2000003, 0x0, '\x00', 0x1, 0x5}) 09:40:53 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1, 0x73b4}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) (async) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$BLKFRASET(r1, 0x1264, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8}) (async) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x6000) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) (async) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r4, 0x1264, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r4}) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000240)) (async) ioctl$LOOP_SET_FD(r5, 0x4c00, r2) [ 1917.473434] [ 1917.475080] ================================================ [ 1917.480866] WARNING: lock held when returning to user space! [ 1917.486652] 4.14.292-syzkaller #0 Not tainted [ 1917.491139] ------------------------------------------------ [ 1917.496923] syz-executor.1/22542 is leaving the kernel with locks still held! [ 1917.504267] 1 lock held by syz-executor.1/22542: [ 1917.509011] #0: (&lo->lo_ctl_mutex/1){+.+.}, at: [] lo_ioctl+0x87/0x1cd0 09:40:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000006c0)) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000040)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0xfffffffffffffffc, 0x4c, 0x0}, 0x0)